Sun Jun 21 06:25:15 MDT 2020 06:25:15 up 3 days, 21:40, 1 user, load average: 0.61, 0.36, 0.31 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT pi tty7 :0 13Jun20 7days 5:15 0.61s /usr/bin/lxsession -s LXDE-pi -e LXDE 85.108.167.135 - - [21/Jun/2020:12:39:20 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" 103.249.181.37 - - [21/Jun/2020:13:01:12 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 94.177.214.123 - - [21/Jun/2020:13:53:48 +0000] "GET / HTTP/1.1" 200 25000 "http://162.250.19.7:80/left.html" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:77.0) Gecko/20100101 Firefox/77.0" 195.54.160.135 - - [21/Jun/2020:15:10:31 +0000] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 195.54.160.135 - - [21/Jun/2020:15:18:41 +0000] "GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 195.54.160.135 - - [21/Jun/2020:15:18:43 +0000] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 195.54.160.135 - - [21/Jun/2020:15:37:22 +0000] "GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 195.93.150.120 - - [21/Jun/2020:16:17:58 +0000] "GET / HTTP/1.1" 400 0 "" "" 37.49.224.229 - - [21/Jun/2020:16:34:04 +0000] "GET / HTTP/1.1" 200 25000 "" "" 94.101.138.231 - - [21/Jun/2020:17:55:07 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7" 94.177.214.123 - - [21/Jun/2020:17:57:07 +0000] "POST /boaform/admin/formLogin HTTP/1.1" 404 0 "http://162.250.19.7:80/admin/login.asp" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 195.54.160.135 - - [21/Jun/2020:18:42:18 +0000] "POST /api/jsonws/invoke HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 139.162.106.181 - - [21/Jun/2020:19:39:12 +0000] "GET / HTTP/1.1" 200 25000 "" "HTTP Banner Detection (https://security.ipip.net)" 94.177.214.123 - - [21/Jun/2020:20:39:33 +0000] "GET / HTTP/1.1" 200 25000 "http://162.250.19.7:80/left.html" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:77.0) Gecko/20100101 Firefox/77.0" 213.119.12.205 - - [21/Jun/2020:20:44:17 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 213.119.12.205 - - [21/Jun/2020:20:44:17 +0000] "GET / HTTP/1.1" 200 25000 "" "" 196.3.170.75 - - [21/Jun/2020:22:22:56 +0000] "GET / HTTP/1.1" 400 0 "" "" 43.225.192.18 - - [21/Jun/2020:22:27:56 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7" 89.144.47.17 - - [21/Jun/2020:22:47:14 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 181.198.212.130 - - [22/Jun/2020:00:02:59 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 180.253.81.74 - - [22/Jun/2020:01:02:30 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7" 185.56.81.52 - - [22/Jun/2020:01:23:18 +0000] "GET /.env HTTP/1.1" 404 0 "" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)" 202.21.99.158 - - [22/Jun/2020:01:58:40 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 131.108.160.128 - - [22/Jun/2020:02:27:21 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" 205.185.114.231 - - [22/Jun/2020:03:44:04 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0" 89.144.47.17 - - [22/Jun/2020:04:32:11 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 61.219.11.153 - - [22/Jun/2020:04:44:47 +0000] "GET / HTTP/1.1" 400 0 "" "" 196.32.107.91 - - [22/Jun/2020:05:20:19 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 41.179.253.229 - - [22/Jun/2020:05:50:16 +0000] "GET /TP/public/index.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 41.179.253.229 - - [22/Jun/2020:05:50:17 +0000] "GET /TP/index.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 41.179.253.229 - - [22/Jun/2020:05:50:17 +0000] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 41.179.253.229 - - [22/Jun/2020:05:50:17 +0000] "GET /html/public/index.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 41.179.253.229 - - [22/Jun/2020:05:50:18 +0000] "GET /public/index.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 41.179.253.229 - - [22/Jun/2020:05:50:18 +0000] "GET /TP/html/public/index.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 41.179.253.229 - - [22/Jun/2020:05:50:19 +0000] "GET /elrekt.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 41.179.253.229 - - [22/Jun/2020:05:50:19 +0000] "GET /index.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 41.179.253.229 - - [22/Jun/2020:05:50:19 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 41.179.253.229 - - [22/Jun/2020:05:50:20 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 185.95.185.170 - - [22/Jun/2020:06:25:47 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 186.219.240.6 - - [22/Jun/2020:06:49:21 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 122.228.19.79 - - [22/Jun/2020:07:00:55 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0" 185.186.16.74 - - [22/Jun/2020:07:45:43 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" 176.56.122.69 - - [22/Jun/2020:08:14:46 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7" 175.4.214.143 - - [22/Jun/2020:08:19:41 +0000] "POST /HNAP1/ HTTP/1.0" 404 0 "" "" 89.144.47.17 - - [22/Jun/2020:10:03:59 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 83.97.20.21 - - [22/Jun/2020:10:32:01 +0000] "GET / HTTP/1.0" 200 25000 "" "" 2020.06.23 Power failure. Computer hung and did not restart. (Possible over heat). 162.250.19.7 - - [24/Jun/2020:00:08:18 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (X11; Linux i686; rv:68.0) Gecko/20100101 Firefox/68.0" 162.250.19.7 - - [24/Jun/2020:00:08:27 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 162.250.19.7 - - [24/Jun/2020:00:08:28 +0000] "GET /freedom/ HTTP/1.1" 200 25000 "http://162.250.19.7/" "Mozilla/5.0 (X11; Linux i686; rv:68.0) Gecko/20100101 Firefox/68.0" 162.250.19.7 - - [24/Jun/2020:00:08:35 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 162.250.19.7 - - [24/Jun/2020:00:08:39 +0000] "GET /freedom/2020-01-08-freedom.txt HTTP/1.1" 200 2533 "http://162.250.19.7/freedom/" "Mozilla/5.0 (X11; Linux i686; rv:68.0) Gecko/20100101 Firefox/68.0"