Sun Jan 5 06:25:05 MST 2020 06:25:05 up 16 days, 21:16, 1 user, load average: 0.50, 0.29, 0.31 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT pi tty7 :0 19Dec19 17days 19:18 2.53s /usr/bin/lxsession -s LXDE-pi -e LXDE 172.105.4.227 - - [05/Jan/2020:13:41:54 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)" 94.102.49.193 - - [05/Jan/2020:14:07:41 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 94.102.49.193 - - [05/Jan/2020:14:07:46 +0000] "GET /robots.txt HTTP/1.1" 200 70 "" "" 94.102.49.193 - - [05/Jan/2020:14:07:49 +0000] "GET /sitemap.xml HTTP/1.1" 200 186 "" "" 185.153.199.3 - - [05/Jan/2020:14:27:13 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 54.36.63.4 - - [05/Jan/2020:14:33:36 +0000] "GET / HTTP/1.0" 200 25000 "" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)" 167.60.28.169 - - [05/Jan/2020:16:01:59 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" 178.128.234.200 - - [05/Jan/2020:16:10:57 +0000] "GET / HTTP/1.0" 200 25000 "" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)" 147.135.130.142 - - [05/Jan/2020:16:52:48 +0000] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:52:49 +0000] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:52:49 +0000] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:52:50 +0000] "GET /pma/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:52:50 +0000] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:52:50 +0000] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:53:03 +0000] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:53:03 +0000] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:53:04 +0000] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:53:04 +0000] "GET /pma/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:53:04 +0000] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:53:05 +0000] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:53:35 +0000] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:53:35 +0000] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:53:35 +0000] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:53:36 +0000] "GET /pma/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:53:36 +0000] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:53:37 +0000] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:54:39 +0000] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:54:40 +0000] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:54:40 +0000] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:54:40 +0000] "GET /pma/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:54:41 +0000] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:54:41 +0000] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:56:55 +0000] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:56:55 +0000] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:56:56 +0000] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:56:56 +0000] "GET /pma/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:56:56 +0000] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:16:56:57 +0000] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:17:01:25 +0000] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:17:01:26 +0000] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:17:01:26 +0000] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:17:01:26 +0000] "GET /pma/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:17:01:27 +0000] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 147.135.130.142 - - [05/Jan/2020:17:01:27 +0000] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 51.89.137.32 - - [05/Jan/2020:17:03:49 +0000] "UNKNOWN UNKNOWN" 0 0 "" "" 51.89.137.32 - - [05/Jan/2020:17:03:49 +0000] "HEAD /robots.txt HTTP/1.0" 200 0 "" "" 45.226.166.46 - - [05/Jan/2020:17:19:29 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" 61.219.11.153 - - [05/Jan/2020:17:37:59 +0000] "GET / HTTP/1.1" 400 0 "" "" 45.239.76.54 - - [05/Jan/2020:17:44:51 +0000] "GET / HTTP/1.1" 400 0 "" "" 192.162.101.47 - - [05/Jan/2020:18:07:35 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 51.89.137.32 - - [05/Jan/2020:18:08:50 +0000] "UNKNOWN UNKNOWN" 0 0 "" "" 51.89.137.32 - - [05/Jan/2020:18:08:50 +0000] "HEAD /robots.txt HTTP/1.0" 200 0 "" "" 172.105.4.227 - - [05/Jan/2020:19:49:25 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)" 101.79.130.50 - - [05/Jan/2020:20:52:12 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 178.73.215.171 - - [05/Jan/2020:21:02:41 +0000] "GET / HTTP/1.0" 200 25000 "" "" 213.136.158.58 - - [05/Jan/2020:22:33:15 +0000] "GET / HTTP/1.1" 400 0 "" "" 2.184.207.144 - - [05/Jan/2020:22:43:45 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 51.89.137.32 - - [05/Jan/2020:23:48:38 +0000] "UNKNOWN UNKNOWN" 0 0 "" "" 51.89.137.32 - - [05/Jan/2020:23:48:38 +0000] "HEAD /robots.txt HTTP/1.0" 200 0 "" "" 172.104.242.173 - - [05/Jan/2020:23:53:42 +0000] "UNKNOWN UNKNOWN" 0 0 "" "" 219.147.166.12 - - [05/Jan/2020:23:58:50 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 159.65.91.112 - - [06/Jan/2020:00:17:20 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 212.225.244.240 - - [06/Jan/2020:00:42:29 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 171.244.68.43 - - [06/Jan/2020:01:57:03 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 221.231.126.2 - - [06/Jan/2020:02:14:04 +0000] "GET / HTTP/1.1" 200 25000 "http://162.250.19.7:80" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 221.231.126.2 - - [06/Jan/2020:02:14:04 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 201.103.6.17 - - [06/Jan/2020:02:58:46 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 79.107.196.211 - - [06/Jan/2020:03:38:12 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" 110.235.255.72 - - [06/Jan/2020:07:12:08 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7" 202.168.64.24 - - [06/Jan/2020:07:43:09 +0000] "GET / HTTP/1.0" 200 25000 "" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)" 222.186.19.221 - - [06/Jan/2020:07:51:26 +0000] "UNKNOWN HTTP/1.1" 400 0 "" "" 51.89.137.32 - - [06/Jan/2020:09:06:56 +0000] "UNKNOWN UNKNOWN" 0 0 "" "" 51.89.137.32 - - [06/Jan/2020:09:06:56 +0000] "HEAD /robots.txt HTTP/1.0" 200 0 "" "" 2.178.66.62 - - [06/Jan/2020:09:14:44 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" 2.178.66.62 - - [06/Jan/2020:09:14:44 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 103.233.122.145 - - [06/Jan/2020:09:49:00 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 89.43.143.4 - - [06/Jan/2020:10:07:46 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7" 74.63.227.26 - - [06/Jan/2020:11:18:57 +0000] "UNKNOWN UNKNOWN" 0 0 "" "" 74.63.227.26 - - [06/Jan/2020:11:18:57 +0000] "HEAD /robots.txt HTTP/1.0" 200 0 "" "" 45.4.107.213 - - [06/Jan/2020:11:33:38 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" 196.50.83.252 - - [06/Jan/2020:12:20:07 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" 103.119.145.54 - - [06/Jan/2020:13:09:40 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" Mon Jan 6 06:25:12 MST 2020 06:25:12 up 17 days, 21:16, 1 user, load average: 0.71, 0.37, 0.36 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT pi tty7 :0 19Dec19 18days 22:25 2.53s /usr/bin/lxsession -s LXDE-pi -e LXDE