Sun Dec 1 06:25:11 MST 2019 06:25:11 up 7:25, 1 user, load average: 0.65, 0.34, 0.30 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT pi tty7 :0 22:58 8:08m 12.60s 0.34s /usr/bin/lxsession -s LXDE-pi -e LXDE 1.53.237.211 - - [01/Dec/2019:14:46:26 +0000] "GET / HTTP/1.0" 200 25000 "" "" 199.30.168.140 - - [01/Dec/2019:16:24:05 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" 94.200.107.2 - - [01/Dec/2019:18:13:27 +0000] "GET /shell?busybox HTTP/1.1" 400 0 "" "Mozilla/5.0" 94.200.107.2 - - [01/Dec/2019:18:13:29 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 185.153.196.97 - - [01/Dec/2019:18:56:40 +0000] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 60.191.52.254 - - [01/Dec/2019:19:07:33 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 60.191.52.254 - - [01/Dec/2019:19:07:33 +0000] "HEAD / HTTP/1.1" 200 0 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36" 178.73.215.171 - - [01/Dec/2019:20:08:17 +0000] "GET / HTTP/1.0" 200 25000 "" "" 185.181.8.244 - - [01/Dec/2019:21:55:01 +0000] "GET / HTTP/1.0" 200 25000 "" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)" 42.200.116.77 - - [01/Dec/2019:22:09:37 +0000] "GET / HTTP/1.0" 200 25000 "" "" 213.128.88.99 - - [01/Dec/2019:22:50:50 +0000] "GET /manager/html HTTP/1.1" 404 0 "" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" 93.183.71.254 - - [01/Dec/2019:23:56:20 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 39.96.22.7 - - [02/Dec/2019:00:11:31 +0000] "GET /index.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/20100101 Firefox/18.0" 39.96.22.7 - - [02/Dec/2019:00:11:33 +0000] "GET /phpmyadmin/index.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/20100101 Firefox/18.0" 5.188.210.101 - - [02/Dec/2019:00:18:50 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 5.188.210.101 - - [02/Dec/2019:00:18:57 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 5.188.210.101 - - [02/Dec/2019:00:19:02 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 5.188.210.101 - - [02/Dec/2019:00:19:46 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 5.188.210.101 - - [02/Dec/2019:00:19:52 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 5.188.210.101 - - [02/Dec/2019:00:19:57 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 34.213.226.112 - - [02/Dec/2019:00:20:15 +0000] "UNKNOWN HTTP/1.1" 501 0 "" "" 5.188.210.101 - - [02/Dec/2019:00:20:44 +0000] "GET /echo.php HTTP/1.1" 404 0 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 61.219.11.153 - - [02/Dec/2019:00:43:04 +0000] "UNKNOWN UNKNOWN" 0 0 "" "" 173.249.2.122 - - [02/Dec/2019:02:36:20 +0000] "GET / HTTP/1.0" 200 25000 "" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)" 110.77.228.197 - - [02/Dec/2019:03:11:08 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 177.105.239.254 - - [02/Dec/2019:03:18:02 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" 54.36.49.151 - - [02/Dec/2019:05:44:42 +0000] "GET / HTTP/1.0" 200 25000 "" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)" 206.189.37.55 - - [02/Dec/2019:05:48:13 +0000] "GET / HTTP/1.0" 200 25000 "" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)" 173.249.16.234 - - [02/Dec/2019:06:05:51 +0000] "GET / HTTP/1.0" 200 25000 "" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)" 159.192.220.5 - - [02/Dec/2019:07:12:23 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 162.250.19.7 - - [02/Dec/2019:07:37:30 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (X11; Linux armv7l) AppleWebKit/537.36 (KHTML, like Gecko) Raspbian Chromium/72.0.3626.121 Chrome/72.0.3626.121 Safari/537.36" 162.250.19.7 - - [02/Dec/2019:07:37:33 +0000] "GET /favicon.ico HTTP/1.1" 200 533 "http://162.250.19.7/" "Mozilla/5.0 (X11; Linux armv7l) AppleWebKit/537.36 (KHTML, like Gecko) Raspbian Chromium/72.0.3626.121 Chrome/72.0.3626.121 Safari/537.36" 162.250.19.7 - - [02/Dec/2019:07:37:56 +0000] "GET /readme.txt HTTP/1.1" 200 247 "http://162.250.19.7/" "Mozilla/5.0 (X11; Linux armv7l) AppleWebKit/537.36 (KHTML, like Gecko) Raspbian Chromium/72.0.3626.121 Chrome/72.0.3626.121 Safari/537.36" 162.250.19.7 - - [02/Dec/2019:07:38:09 +0000] "GET /robots.txt HTTP/1.1" 200 27 "http://162.250.19.7/" "Mozilla/5.0 (X11; Linux armv7l) AppleWebKit/537.36 (KHTML, like Gecko) Raspbian Chromium/72.0.3626.121 Chrome/72.0.3626.121 Safari/537.36" 162.250.19.7 - - [02/Dec/2019:07:38:20 +0000] "GET /favicon.ico HTTP/1.1" 304 0 "http://162.250.19.7/" "Mozilla/5.0 (X11; Linux armv7l) AppleWebKit/537.36 (KHTML, like Gecko) Raspbian Chromium/72.0.3626.121 Chrome/72.0.3626.121 Safari/537.36" 162.250.19.7 - - [02/Dec/2019:07:38:42 +0000] "GET /ac0xl/ HTTP/1.1" 200 25000 "http://162.250.19.7/" "Mozilla/5.0 (X11; Linux armv7l) AppleWebKit/537.36 (KHTML, like Gecko) Raspbian Chromium/72.0.3626.121 Chrome/72.0.3626.121 Safari/537.36" 162.250.19.7 - - [02/Dec/2019:07:38:46 +0000] "GET /ac0xl/logs/ HTTP/1.1" 200 25000 "http://162.250.19.7/ac0xl/" "Mozilla/5.0 (X11; Linux armv7l) AppleWebKit/537.36 (KHTML, like Gecko) Raspbian Chromium/72.0.3626.121 Chrome/72.0.3626.121 Safari/537.36" 162.250.19.7 - - [02/Dec/2019:07:38:55 +0000] "GET /ac0xl/logs/2019.12.01 HTTP/1.1" 200 12658 "http://162.250.19.7/ac0xl/logs/" "Mozilla/5.0 (X11; Linux armv7l) AppleWebKit/537.36 (KHTML, like Gecko) Raspbian Chromium/72.0.3626.121 Chrome/72.0.3626.121 Safari/537.36" 85.217.171.67 - - [02/Dec/2019:07:47:41 +0000] "GET /auth1.html HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36" 173.212.226.7 - - [02/Dec/2019:08:02:47 +0000] "GET / HTTP/1.0" 200 25000 "" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)" 115.76.200.39 - - [02/Dec/2019:08:17:28 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" 41.216.186.89 - - [02/Dec/2019:09:27:03 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 138.204.135.59 - - [02/Dec/2019:09:33:03 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 173.249.57.206 - - [02/Dec/2019:10:18:23 +0000] "GET / HTTP/1.0" 200 25000 "" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)" 190.94.149.142 - - [02/Dec/2019:10:48:32 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" Mon Dec 2 06:25:05 MST 2019 06:25:05 up 1 day, 7:25, 1 user, load average: 0.33, 0.24, 0.29 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT pi tty7 :0 Sat22 32:07m 1:15 0.83s /usr/bin/lxsession -s LXDE-pi -e LXDE