509318396 ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ 34.140.3.155 - - [21/Oct/2026:12:09:57 +0000] "GET / HTTP/1.1" 200 3528 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 20.46.234.238 - - [21/Oct/2026:12:29:50 +0000] "GET / HTTP/1.1" 200 3528 "-" "Mozilla/5.0 zgrab/0.x" 152.236.14.137 - - [21/Oct/2026:12:33:01 +0000] "POST / HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0" 40.124.80.46 - - [21/Oct/2026:12:36:33 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 404 - "-" "Mozilla/5.0 zgrab/0.x" 185.12.59.118 - - [21/Oct/2026:12:38:40 +0000] "GET / HTTP/1.0" 404 - "-" "-" 40.124.83.225 - - [21/Oct/2026:12:39:51 +0000] "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 404 - "-" "Mozilla/5.0 zgrab/0.x" 164.92.211.98 - - [21/Oct/2026:13:01:50 +0000] "POST / HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:34.0) Gecko/20100101 Firefox/34.0" 164.92.211.98 - - [21/Oct/2026:13:01:50 +0000] "GET / HTTP/1.1" 200 3528 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 143.110.158.108 - - [21/Oct/2026:13:37:40 +0000] "SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1" 404 - "-" "-" 165.154.218.226 - - [21/Oct/2026:13:37:48 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 404 - "-" "libredtail-http" 165.154.218.226 - - [21/Oct/2026:13:37:51 +0000] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 404 - "-" "libredtail-http" 165.154.218.226 - - [21/Oct/2026:13:37:54 +0000] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 - "-" "libredtail-http" 165.154.218.226 - - [21/Oct/2026:13:37:57 +0000] "POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 403 31013 "-" "libredtail-http" 188.93.233.81 - - [21/Oct/2026:13:38:10 +0000] "GET /.env HTTP/1.1" 404 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 188.93.233.81 - - [21/Oct/2026:13:38:11 +0000] "POST / HTTP/1.1" 404 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 40.119.28.104 - - [21/Oct/2026:13:42:19 +0000] "GET /login HTTP/1.1" 404 - "-" "Mozilla/5.0 zgrab/0.x" 185.180.141.49 - - [21/Oct/2026:14:18:55 +0000] "GET / HTTP/1.1" 200 3528 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 185.180.141.47 - - [21/Oct/2026:14:19:05 +0000] "POST /mcp HTTP/2.0" 404 - "-" "python-httpx/0.28.1" 185.180.141.47 - - [21/Oct/2026:14:19:05 +0000] "GET /sse HTTP/2.0" 404 - "-" "python-httpx/0.28.1" 185.180.141.50 - - [21/Oct/2026:14:19:06 +0000] "GET /favicon.ico HTTP/1.1" 404 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 78.153.140.250 - - [21/Oct/2026:14:49:56 +0000] "GET /.env HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 78.153.140.250 - - [21/Oct/2026:14:49:56 +0000] "POST / HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 157.245.76.42 - - [21/Oct/2026:14:53:04 +0000] "GET / HTTP/2.0" 200 3528 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 ForestEngine/1.0 (+https://forestengine.net/#opt-out)" 157.245.76.42 - - [21/Oct/2026:14:53:04 +0000] "GET /favicon.ico HTTP/2.0" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 ForestEngine/1.0 (+https://forestengine.net/#opt-out)" 139.162.88.198 - - [21/Oct/2026:15:01:04 +0000] "SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1" 404 - "-" "-" 165.227.102.187 - - [21/Oct/2026:15:10:20 +0000] "GET /.env HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; research)" 95.214.53.196 - - [21/Oct/2026:15:38:48 +0000] "GET / HTTP/1.0" 404 - "-" "-" 95.214.53.196 - - [21/Oct/2026:15:38:48 +0000] "GET / HTTP/1.0" 404 - "-" "-" 205.210.31.226 - - [21/Oct/2026:15:41:27 +0000] "GET / HTTP/1.1" 200 3528 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 138.246.253.24 - - [21/Oct/2026:15:43:54 +0000] "GET /robots.txt HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 85.217.149.28 - - [21/Oct/2026:16:28:09 +0000] "GET / HTTP/1.1" 200 3528 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 ModatScanner/1.2 (+https://modat.io/)" 195.178.110.137 - - [21/Oct/2026:16:34:41 +0000] "GET / HTTP/1.0" 404 - "-" "-" 195.178.110.137 - - [21/Oct/2026:16:34:42 +0000] "GET /.DS_Store HTTP/1.1" 404 - "-" "-" 165.99.207.153 - - [21/Oct/2026:16:42:29 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 404 - "-" "libredtail-http" 165.99.207.153 - - [21/Oct/2026:16:42:30 +0000] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 404 - "-" "libredtail-http" 165.99.207.153 - - [21/Oct/2026:16:42:30 +0000] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 - "-" "libredtail-http" 165.99.207.153 - - [21/Oct/2026:16:42:31 +0000] "POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 403 31013 "-" "libredtail-http" 94.154.43.196 - - [21/Oct/2026:17:07:06 +0000] "GET / HTTP/1.1" 403 31013 "-" "Mozilla/5.0" 94.154.43.196 - - [21/Oct/2026:17:07:07 +0000] "PROPFIND / HTTP/1.1" 403 31013 "http://172.105.42.26:443/" "-" 78.153.140.250 - - [21/Oct/2026:17:12:54 +0000] "GET /.env HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 78.153.140.250 - - [21/Oct/2026:17:12:55 +0000] "POST / HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 192.248.150.180 - - [21/Oct/2026:17:23:27 +0000] "GET / HTTP/2.0" 200 3528 "-" "Mozilla/5.0 (compatible; CyberConvoyScout/1.0; +https://scout.cyberconvoy.co)" 34.77.25.245 - - [21/Oct/2026:17:33:16 +0000] "GET / HTTP/1.1" 200 3528 "-" "python-requests/2.34.2" 216.180.246.88 - - [21/Oct/2026:17:43:01 +0000] "GET / HTTP/1.0" 404 - "-" "-" 216.180.246.88 - - [21/Oct/2026:17:43:07 +0000] "GET / HTTP/1.0" 404 - "-" "-" 216.180.246.88 - - [21/Oct/2026:17:43:11 +0000] "GET / HTTP/1.0" 404 - "-" "-" 157.245.250.244 - - [21/Oct/2026:17:50:59 +0000] "GET /.env HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.4" 137.23.38.53 - - [21/Oct/2026:17:55:58 +0000] "GET /.env HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 137.184.75.34 - - [21/Oct/2026:18:31:26 +0000] "GET / HTTP/1.1" 200 11229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0" 185.12.59.118 - - [21/Oct/2026:18:35:49 +0000] "GET / HTTP/2.0" 200 3528 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0" 37.60.226.187 - - [21/Oct/2026:19:12:42 +0000] "GET /.env HTTP/1.1" 404 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/538.1 (KHTML, like Gecko) QupZilla/1.9.0 Safari/538.1" 45.148.10.171 - - [21/Oct/2026:19:19:24 +0000] "GET /.env HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 9; SM-G9600) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36" 37.60.226.187 - - [21/Oct/2026:19:19:45 +0000] "GET /.env HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; U; Android 2.0.1; de-de; Milestone Build/SHOLS_U2_01.14.0) AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Mobile Safari/530.17"