8000 Update for restricted-files.data by azurit · Pull Request #1960 · coreruleset/coreruleset · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Update for restricted-files.data #1960

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 2 commits into from
Jan 9, 2021
Merged

Update for restricted-files.data #1960

merged 2 commits into from
Jan 9, 2021

Conversation

azurit
Copy link
Member
@azurit azurit commented Dec 26, 2020

Sending update for restricted-files.data based on real-world scan:

77.93.223.94 - - [25/Dec/2020:07:12:34 +0100] <censored> <censored> "GET / HTTP/1.1" 500 581 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 908
77.93.223.94 - - [25/Dec/2020:07:12:36 +0100] <censored> <censored> "GET /wp-content/plugins/angwp/assets/dist/angwp.bundle.js HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 128
77.93.223.94 - - [25/Dec/2020:07:12:36 +0100] <censored> <censored> "GET / HTTP/1.1" 500 8673 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 15559
77.93.223.94 - - [25/Dec/2020:07:12:52 +0100] <censored> <censored> "GET / HTTP/1.1" 500 581 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6822
77.93.223.94 - - [25/Dec/2020:07:12:59 +0100] <censored> <censored> "GET /index.php?token=e2e56142c30538bdf7ff2eda1683d9b5 HTTP/1.1" 500 581 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 2075
77.93.223.94 - - [25/Dec/2020:07:13:03 +0100] <censored> <censored> "POST / HTTP/1.1" 500 581 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4655
77.93.223.94 - - [25/Dec/2020:07:13:08 +0100] <censored> <censored> "GET /wp-login.php HTTP/1.1" 200 1401 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 26642
77.93.223.94 - - [25/Dec/2020:07:13:35 +0100] <censored> <censored> "GET /wp-login.php?token=1e438d9588c6ab73a9b84e1c05d5fbba HTTP/1.1" 500 581 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 5189
77.93.223.94 - - [25/Dec/2020:07:13:40 +0100] <censored> <censored> "POST /wp-admin/options-general.php HTTP/1.1" 500 581 "https://<censored>/wp-admin/options-general.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0" 8366
77.93.223.94 - - [25/Dec/2020:07:13:49 +0100] <censored> <censored> "GET /wp-content/plugins/easy-wp-smtp/ HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 3081
77.93.223.94 - - [25/Dec/2020:07:13:52 +0100] <censored> <censored> "GET /wp-content/plugins/ait-csv-import-export/admin/assets/scripts/scripts.js HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:13:53 +0100] <censored> <censored> "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 232
77.93.223.94 - - [25/Dec/2020:07:13:53 +0100] <censored> <censored> "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 17
77.93.223.94 - - [25/Dec/2020:07:13:54 +0100] <censored> <censored> "GET / HTTP/1.1" 500 581 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:13:54 +0100] <censored> <censored> "GET /?token=1e438d9588c6ab73a9b84e1c05d5fbba HTTP/1.1" 500 581 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 8
77.93.223.94 - - [25/Dec/2020:07:13:54 +0100] <censored> <censored> "GET /?lt=1 HTTP/1.1" 500 581 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 8
77.93.223.94 - - [25/Dec/2020:07:13:55 +0100] <censored> <censored> "POST / HTTP/1.1" 500 581 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 11
77.93.223.94 - - [25/Dec/2020:07:13:55 +0100] <censored> <censored> "GET /?lt=1 HTTP/1.1" 500 581 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 8
77.93.223.94 - - [25/Dec/2020:07:13:55 +0100] <censored> <censored> "GET /wp-content/plugins/ultimate-member/assets/js/um-modal.js HTTP/1.1" 503 583 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 8095
77.93.223.94 - - [25/Dec/2020:07:14:04 +0100] <censored> <censored> "GET /phpmyadmin HTTP/1.1" 404 14357 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37520
77.93.223.94 - - [25/Dec/2020:07:14:42 +0100] <censored> <censored> "GET /?/phpmyadmin HTTP/1.1" 500 581 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 2438
77.93.223.94 - - [25/Dec/2020:07:15:45 +0100] <censored> <censored>:443 "GET /phpmyadmin HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7339
77.93.223.94 - - [25/Dec/2020:07:17:12 +0100] <censored> <censored> "GET /myadmin HTTP/1.1" 404 14354 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 2090
77.93.223.94 - - [25/Dec/2020:07:17:15 +0100] <censored> <censored> "GET /mysql HTTP/1.1" 404 14352 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 132
77.93.223.94 - - [25/Dec/2020:07:17:15 +0100] <censored> <censored> "GET /mysqladmin HTTP/1.1" 404 14357 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 125
77.93.223.94 - - [25/Dec/2020:07:17:16 +0100] <censored> <censored> "GET /db HTTP/1.1" 404 14349 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 121
77.93.223.94 - - [25/Dec/2020:07:17:16 +0100] <censored> <censored> "GET /sqladmin HTTP/1.1" 404 14355 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 118
77.93.223.94 - - [25/Dec/2020:07:17:17 +0100] <censored> <censored> "GET /pma HTTP/1.1" 404 14350 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 134
77.93.223.94 - - [25/Dec/2020:07:17:17 +0100] <censored> <censored> "GET /phpmy HTTP/1.1" 404 14352 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 118
77.93.223.94 - - [25/Dec/2020:07:17:18 +0100] <censored> <censored
8000
> "GET /phpmanager HTTP/1.1" 404 14357 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 118
77.93.223.94 - - [25/Dec/2020:07:19:18 +0100] <censored> <censored> "GET /adminer.php HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 2237
77.93.223.94 - - [25/Dec/2020:07:19:21 +0100] <censored> <censored> "GET /.DS_Store HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:19:21 +0100] <censored> <censored> "GET /.dockerignore HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6
77.93.223.94 - - [25/Dec/2020:07:19:22 +0100] <censored> <censored> "GET /.eslintignore HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 8
77.93.223.94 - - [25/Dec/2020:07:19:22 +0100] <censored> <censored> "GET /.git HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:19:22 +0100] <censored> <censored> "GET /.gitattributes HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 12
77.93.223.94 - - [25/Dec/2020:07:19:23 +0100] <censored> <censored> "GET /.gitignore HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:19:23 +0100] <censored> <censored> "GET /.htaccess.bak HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 1
77.93.223.94 - - [25/Dec/2020:07:19:23 +0100] <censored> <censored> "GET /.htaccess.sample HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 1
77.93.223.94 - - [25/Dec/2020:07:19:24 +0100] <censored> <censored> "GET /.htaccess HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 1
77.93.223.94 - - [25/Dec/2020:07:19:24 +0100] <censored> <censored> "GET /.htpasswd HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 1
77.93.223.94 - - [25/Dec/2020:07:19:24 +0100] <censored> <censored> "GET /.meta HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6
77.93.223.94 - - [25/Dec/2020:07:19:25 +0100] <censored> <censored> "GET /.php_cs.dist HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6
77.93.223.94 - - [25/Dec/2020:07:19:25 +0100] <censored> <censored> "GET /.svn HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 81
77.93.223.94 - - [25/Dec/2020:07:19:26 +0100] <censored> <censored> "GET /.travis.yml HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:19:26 +0100] <censored> <censored> "GET /.user.ini HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:19:26 +0100] <censored> <censored> "GET /.web HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:19:27 +0100] <censored> <censored> "GET /.wp-config.php.BCK HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:19:27 +0100] <censored> <censored> "GET /.wp-config.php.SWP HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6
77.93.223.94 - - [25/Dec/2020:07:19:27 +0100] <censored> <censored> "GET /.wp-config.php.bck HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:19:28 +0100] <censored> <censored> "GET /.wp-config.php.swp HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6
77.93.223.94 - - [25/Dec/2020:07:19:28 +0100] <censored> <censored> "GET /?aam-media=wp-config.php HTTP/1.1" 500 581 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 18
77.93.223.94 - - [25/Dec/2020:07:19:28 +0100] <censored> <censored> "GET /CHANGELOG.md HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:19:29 +0100] <censored> <censored> "GET /Desktop.ini HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6
77.93.223.94 - - [25/Dec/2020:07:19:29 +0100] <censored> <censored> "GET /LICENSE.txt HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:19:29 +0100] <censored> <censored> "GET /Makefile.in HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:19:30 +0100] <censored> <censored> "GET /README.md HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:19:30 +0100] <censored> <censored> "GET /Robots.txt HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6
77.93.223.94 - - [25/Dec/2020:07:19:30 +0100] <censored> <censored> "GET /Thumbs.db HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:19:31 +0100] <censored> <censored> "GET /VERSION HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 580
77.93.223.94 - - [25/Dec/2020:07:19:32 +0100] <censored> <censored> "GET /access.log HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 276
77.93.223.94 - - [25/Dec/2020:07:19:32 +0100] <censored> <censored> "GET /composer.json HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:19:33 +0100] <censored> <censored> "GET /config.bak HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:19:33 +0100] <censored> <censored> "GET /config.ini HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6
77.93.223.94 - - [25/Dec/2020:07:19:33 +0100] <censored> <censored> "GET /config.json HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 8
77.93.223.94 - - [25/Dec/2020:07:19:34 +0100] <censored> <censored> "GET /config.status HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:19:34 +0100] <censored> <censored> "GET /debug.log HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6
77.93.223.94 - - [25/Dec/2020:07:19:34 +0100] <censored> <censored> "GET /error.txt HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6351
77.93.223.94 - - [25/Dec/2020:07:19:41 +0100] <censored> <censored> "GET /errors.txt HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6
77.93.223.94 - - [25/Dec/2020:07:19:41 +0100] <censored> <censored> "GET /license.txt HTTP/1.1" 200 7304 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 25
77.93.223.94 - - [25/Dec/2020:07:19:42 +0100] <censored> <censored> "GET /log.txt HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6
77.93.223.94 - - [25/Dec/2020:07:19:42 +0100] <censored> <censored> "GET /logs.txt HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6
77.93.223.94 - - [25/Dec/2020:07:19:42 +0100] <censored> <censored> "GET /logs/php-errors.log HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:19:43 +0100] <censored> <censored> "GET /php.ini.sample HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:19:43 +0100] <censored> <censored> "GET /php.ini HTTP/1.1" 404 14354 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 24214
77.93.223.94 - - [25/Dec/2020:07:20:09 +0100] <censored> <censored> "GET /php_error.log HTTP/1.1" 404 14360 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 142
77.93.223.94 - - [25/Dec/2020:07:20:09 +0100] <censored> <censored> "GET /php_errors.log HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 9
77.93.223.94 - - [25/Dec/2020:07:20:10 +0100] <censored> <censored> "GET /phpcs.xml HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 518
77.93.223.94 - - [25/Dec/2020:07:20:10 +0100] <censored> <censored> "GET /readme.html HTTP/1.1" 200 2960 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 13
77.93.223.94 - - [25/Dec/2020:07:20:11 +0100] <censored> <censored> "GET /readme.txt HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 8
77.93.223.94 - - [25/Dec/2020:07:20:11 +0100] <censored> <censored> "GET /robots.txt HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 16
77.93.223.94 - - [25/Dec/2020:07:20:11 +0100] <censored> <censored> "GET /robots HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:20:12 +0100] <censored> <censored> "GET /sitemap.xml.gz HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:20:12 +0100] <censored> <censored> "GET /sitemap.xml HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:20:13 +0100] <censored> <censored> "GET /tags.txt HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:20:13 +0100] <censored> <censored> "GET /test.txt HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:20:13 +0100] <censored> <censored> "GET /user.ini HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 9
77.93.223.94 - - [25/Dec/2020:07:20:14 +0100] <censored> <censored> "GET /version.xml HTTP/1.1" 404 14358 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 135
77.93.223.94 - - [25/Dec/2020:07:20:14 +0100] <censored> <censored> "GET /web.xml HTTP/1.1" 404 14354 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 133
77.93.223.94 - - [25/Dec/2020:07:20:14 +0100] <censored> <censored> "GET /weblogic.xml HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:20:15 +0100] <censored> <censored> "GET /wp-admin/access.log HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 8
77.93.223.94 - - [25/Dec/2020:07:20:15 +0100] <censored> <censored> "GET /wp-admin/admin-ajax.php?action=duplicator_download&file=/../wp-config.php HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 11
77.93.223.94 - - [25/Dec/2020:07:20:16 +0100] <censored> <censored> "GET /wp-admin/debug.log HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 8
77.93.223.94 - - [25/Dec/2020:07:20:16 +0100] <censored> <censored> "GET /wp-config%20fix.txt HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 9
77.93.223.94 - - [25/Dec/2020:07:20:16 +0100] <censored> <censored> "GET /wp-config-backup.txt HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:20:17 +0100] <censored> <censored> "GET /wp-config-backup1.txt HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 10
77.93.223.94 - - [25/Dec/2020:07:20:17 +0100] <censored> <censored> "GET /wp-config-backup HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 226
77.93.223.94 - - [25/Dec/2020:07:20:17 +0100] <censored> <censored> "GET /wp-config-sample.php HTTP/1.1" 500 581 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4729
77.93.223.94 - - [25/Dec/2020:07:20:23 +0100] <censored> <censored> "GET /wp-config.BACKUP HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:20:23 +0100] <censored> <censored> "GET /wp-config.BACK HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6
77.93.223.94 - - [25/Dec/2020:07:20:23 +0100] <censored> <censored> "GET /wp-config.BAK HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:24 +0100] <censored> <censored> "GET /wp-config.COPY HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6
77.93.223.94 - - [25/Dec/2020:07:20:24 +0100] <censored> <censored> "GET /wp-config.DAT HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:20:24 +0100] <censored> <censored> "GET /wp-config.DB HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6
77.93.223.94 - - [25/Dec/2020:07:20:25 +0100] <censored> <censored> "GET /wp-config.OLD HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:25 +0100] <censored> <censored> "GET /wp-config.ORIGINAL HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:20:25 +0100] <censored> <censored> "GET /wp-config.ORIG HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6
77.93.223.94 - - [25/Dec/2020:07:20:26 +0100] <censored> <censored> "GET /wp-config.SAVE HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:20:26 +0100] <censored> <censored> "GET /wp-config.TAR.GZ HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:20:26 +0100] <censored> <censored> "GET /wp-config.TEST HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6
77.93.223.94 - - [25/Dec/2020:07:20:27 +0100] <censored> <censored> "GET /wp-config.TMP HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:27 +0100] <censored> <censored> "GET /wp-config.TXT HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:27 +0100] <censored> <censored> "GET /wp-config.ZIP HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6
77.93.223.94 - - [25/Dec/2020:07:20:28 +0100] <censored> <censored> "GET /wp-config. HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 206
77.93.223.94 - - [25/Dec/2020:07:20:28 +0100] <censored> <censored> "GET /wp-config.back HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:20:29 +0100] <censored> <censored> "GET /wp-config.backup HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:20:29 +0100] <censored> <censored> "GET /wp-config.bak HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:29 +0100] <censored> <censored> "GET /wp-config.copy HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 15
77.93.223.94 - - [25/Dec/2020:07:20:30 +0100] <censored> <censored> "GET /wp-config.dat HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:20:30 +0100] <censored> <censored> "GET /wp-config.db HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 8
77.93.223.94 - - [25/Dec/2020:07:20:30 +0100] <censored> <censored> "GET /wp-config.old HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:31 +0100] <censored> <censored> "GET /wp-config.orig HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:20:31 +0100] <censored> <censored> "GET /wp-config.original HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:20:31 +0100] <censored> <censored> "GET /wp-config.php-old HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:32 +0100] <censored> <censored> "GET /wp-config.php.1 HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:32 +0100] <censored> <censored> "GET /wp-config.php.2 HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:32 +0100] <censored> <censored> "GET /wp-config.php.3 HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 3
77.93.223.94 - - [25/Dec/2020:07:20:33 +0100] <censored> <censored> "GET /wp-config.php.BACKUP HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:33 +0100] <censored> <censored> "GET /wp-config.php.BACK HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:33 +0100] <censored> <censored> "GET /wp-config.php.BAK HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:34 +0100] <censored> <censored> "GET /wp-config.php.BCK HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:34 +0100] <censored> <censored> "GET /wp-config.php.COPY HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:34 +0100] <censored> <censored> "GET /wp-config.php.DAT HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 3
77.93.223.94 - - [25/Dec/2020:07:20:35 +0100] <censored> <censored> "GET /wp-config.php.DB HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:35 +0100] <censored> <censored> "GET /wp-config.php.OLD HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:35 +0100] <censored> <censored> "GET /wp-config.php.ORIGINAL HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:36 +0100] <censored> <censored> "GET /wp-config.php.ORIG HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:36 +0100] <censored> <censored> "GET /wp-config.php.SAVE HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:36 +0100] <censored> <censored> "GET /wp-config.php.SWO HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:37 +0100] <censored> <censored> "GET /wp-config.php.SWP HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 5
77.93.223.94 - - [25/Dec/2020:07:20:37 +0100] <censored> <censored> "GET /wp-config.php.TAR.GZ HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:37 +0100] <censored> <censored> "GET /wp-config.php.TEST HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:38 +0100] <censored> <censored> "GET /wp-config.php.TMP HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:38 +0100] <censored> <censored> "GET /wp-config.php.TXT HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:38 +0100] <censored> <censored> "GET /wp-config.php.ZIP HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:39 +0100] <censored> <censored> "GET /wp-config.php._INC HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 3
77.93.223.94 - - [25/Dec/2020:07:20:39 +0100] <censored> <censored> "GET /wp-config.php._inc HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 5
77.93.223.94 - - [25/Dec/2020:07:20:40 +0100] <censored> <censored> "GET /wp-config.php.back HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:40 +0100] <censored> <censored> "GET /wp-config.php.backup HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:40 +0100] <censored> <censored> "GET /wp-config.php.bak HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:41 +0100] <censored> <censored> "GET /wp-config.php.bck HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:41 +0100] <censored> <censored> "GET /wp-config.php.bkp HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:41 +0100] <censored> <censored> "GET /wp-config.php.copy HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:42 +0100] <censored> <censored> "GET /wp-config.php.dat HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:42 +0100] <censored> <censored> "GET /wp-config.php.db HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 5
77.93.223.94 - - [25/Dec/2020:07:20:42 +0100] <censored> <censored> "GET /wp-config.php.old HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:43 +0100] <censored> <censored> "GET /wp-config.php.orig HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:43 +0100] <censored> <censored> "GET /wp-config.php.original HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:43 +0100] <censored> <censored> "GET /wp-config.php.restore HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:44 +0100] <censored> <censored> "GET /wp-config.php.save HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:44 +0100] <censored> <censored> "GET /wp-config.php.swo HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:44 +0100] <censored> <censored> "GET /wp-config.php.swp HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:45 +0100] <censored> <censored> "GET /wp-config.php.tar.gz HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:45 +0100] <censored> <censored> "GET /wp-config.php.test HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:45 +0100] <censored> <censored> "GET /wp-config.php.tmp HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:46 +0100] <censored> <censored> "GET /wp-config.php.txt HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:46 +0100] <censored> <censored> "GET /wp-config.php.zip HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit
8000
/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:46 +0100] <censored> <censored> "GET /wp-config.php?aam-media=1 HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:47 +0100] <censored> <censored> "GET /wp-config.phpOLD HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:47 +0100] <censored> <censored> "GET /wp-config.php_BAK HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:48 +0100] <censored> <censored> "GET /wp-config.php_bak HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:48 +0100] <censored> <censored> "GET /wp-config.phpa HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 5
77.93.223.94 - - [25/Dec/2020:07:20:48 +0100] <censored> <censored> "GET /wp-config.phpe HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:49 +0100] <censored> <censored> "GET /wp-config.php~ HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:20:49 +0100] <censored> <censored> "GET /wp-config.save HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4247
77.93.223.94 - - [25/Dec/2020:07:20:53 +0100] <censored> <censored> "GET /wp-config.tar.gz HTTP/1.1" 404 14363 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 21042
77.93.223.94 - - [25/Dec/2020:07:21:15 +0100] <censored> <censored> "GET /wp-config.test HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 15
77.93.223.94 - - [25/Dec/2020:07:21:15 +0100] <censored> <censored> "GET /wp-config.tmp HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:21:16 +0100] <censored> <censored> "GET /wp-config.txt HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:21:16 +0100] <censored> <censored> "GET /wp-config.zip HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:21:16 +0100] <censored> <censored> "GET /wp-config_INC HTTP/1.1" 404 14360 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 238
77.93.223.94 - - [25/Dec/2020:07:21:17 +0100] <censored> <censored> "GET /wp-config_inc HTTP/1.1" 404 14360 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 699
77.93.223.94 - - [25/Dec/2020:07:21:18 +0100] <censored> <censored> "GET /wp-config HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 492
77.93.223.94 - - [25/Dec/2020:07:21:19 +0100] <censored> <censored> "GET /wp-content/access.log HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 8
77.93.223.94 - - [25/Dec/2020:07:21:19 +0100] <censored> <censored> "GET /wp-content/debug.log HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:21:19 +0100] <censored> <censored> "GET /wp-content/php_errors.log HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6
77.93.223.94 - - [25/Dec/2020:07:21:20 +0100] <censored> <censored> "GET /wp-content/themes/twentythirteen/fonts/COPYING.txt HTTP/1.1" 200 728 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6
77.93.223.94 - - [25/Dec/2020:07:21:20 +0100] <censored> <censored> "GET /wp-content/themes/twentythirteen/fonts/LICENSE.txt HTTP/1.1" 200 6831 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 23
77.93.223.94 - - [25/Dec/2020:07:21:20 +0100] <censored> <censored> "GET /wp-includes/ID3/license.commercial.txt HTTP/1.1" 200 608 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:21:21 +0100] <censored> <censored> "GET /wp-includes/ID3/license.txt HTTP/1.1" 200 462 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 5
77.93.223.94 - - [25/Dec/2020:07:21:21 +0100] <censored> <censored> "GET /wp-includes/ID3/readme.txt HTTP/1.1" 200 9668 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 44
77.93.223.94 - - [25/Dec/2020:07:21:21 +0100] <censored> <censored> "GET /wp-includes/access.log HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 20
77.93.223.94 - - [25/Dec/2020:07:21:22 +0100] <censored> <censored> "GET /wp-includes/debug.log HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:21:22 +0100] <censored> <censored> "GET /wp-includes/images/crystal/license.txt HTTP/1.1" 200 143 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:21:22 +0100] <censored> <censored> "GET /wp-includes/js/plupload/changelog.txt HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:21:23 +0100] <censored> <censored> "GET /wp-includes/js/plupload/license.txt HTTP/1.1" 200 6838 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 24
77.93.223.94 - - [25/Dec/2020:07:21:23 +0100] <censored> <censored> "GET /wp-includes/js/swfupload/license.txt HTTP/1.1" 200 844 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:21:24 +0100] <censored> <censored> "GET /wp-includes/js/tinymce/license.txt HTTP/1.1" 200 9374 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 32
77.93.223.94 - - [25/Dec/2020:07:21:24 +0100] <censored> <censored> "GET /wp-includes/js/tinymce/plugins/spellchecker/changelog.txt HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 2192
77.93.223.94 - - [25/Dec/2020:07:21:26 +0100] <censored> <censored> "GET /xmlrpc.php HTTP/1.1" 500 581 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 181
77.93.223.94 - - [25/Dec/2020:07:21:27 +0100] <censored> <censored> "GET /.DS_Store HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 3
77.93.223.94 - - [25/Dec/2020:07:21:27 +0100] <censored> <censored> "GET /.FBCIndex HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:21:28 +0100] <censored> <censored> "GET /.access HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:21:28 +0100] <censored> <censored> "GET /.addressbook HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:21:28 +0100] <censored> <censored> "GET /.bash_history HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:21:29 +0100] <censored> <censored> "GET /.bashrc HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:21:29 +0100] <censored> <censored> "GET /.env HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:21:29 +0100] <censored> <censored> "GET /.forward HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 1097
77.93.223.94 - - [25/Dec/2020:07:21:31 +0100] <censored> <censored> "GET /.gitignore HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 5
77.93.223.94 - - [25/Dec/2020:07:21:31 +0100] <censored> <censored> "GET /.history HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:21:31 +0100] <censored> <censored> "GET /.htaccess HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 2
77.93.223.94 - - [25/Dec/2020:07:21:32 +0100] <censored> <censored> "GET /.htpasswd HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 2
77.93.223.94 - - [25/Dec/2020:07:21:32 +0100] <censored> <censored> "GET /.lynx_cookies HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 249
77.93.223.94 - - [25/Dec/2020:07:21:33 +0100] <censored> <censored> "GET /.meta HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:21:33 +0100] <censored> <censored> "GET /.mysql_history HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:21:33 +0100] <censored> <censored> "GET /.nsconfig HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:21:34 +0100] <censored> <censored> "GET /.nsf..winntwin.ini HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:21:34 +0100] <censored> <censored> "GET /.passwd HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:21:34 +0100] <censored> <censored> "GET /.perf HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 8
77.93.223.94 - - [25/Dec/2020:07:21:35 +0100] <censored> <censored> "GET /.pinerc HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:21:35 +0100] <censored> <censored> "GET /.plan HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 8
77.93.223.94 - - [25/Dec/2020:07:21:35 +0100] <censored> <censored> "GET /.proclog HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6
77.93.223.94 - - [25/Dec/2020:07:21:36 +0100] <censored> <censored> "GET /.procmailrc HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 32
77.93.223.94 - - [25/Dec/2020:07:21:36 +0100] <censored> <censored> "GET /.profile HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:21:36 +0100] <censored> <censored> "GET /.psql_history HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:21:37 +0100] <censored> <censored> "GET /.rhosts HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:21:37 +0100] <censored> <censored> "GET /.sh_history HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:21:37 +0100] <censored> <censored> "GET /.ssh HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 6
77.93.223.94 - - [25/Dec/2020:07:21:38 +0100] <censored> <censored> "GET /.web HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 20
77.93.223.94 - - [25/Dec/2020:07:21:38 +0100] <censored> <censored> "GET /.www_acl HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:21:38 +0100] <censored> <censored> "GET /.wwwacl HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45
77.93.223.94 - - [25/Dec/2020:07:21:39 +0100] <censored> <censored> "GET /config.inc HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 11
77.93.223.94 - - [25/Dec/2020:07:21:39 +0100] <censored> <censored> "GET /config.xml HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:21:40 +0100] <censored> <censored> "GET /force-download.php?file=wp-config.php HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 8
77.93.223.94 - - [25/Dec/2020:07:21:40 +0100] <censored> <censored> "GET /node.xml HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:21:40 +0100] <censored> <censored> "GET /resources.xml HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 7
77.93.223.94 - - [25/Dec/2020:07:21:41 +0100] <censored> <censored> "GET /security.xml HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 10
77.93.223.94 - - [25/Dec/2020:07:21:41 +0100] <censored> <censored> "GET /server.xml HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 46
77.93.223.94 - - [25/Dec/2020:07:21:41 +0100] <censored> <censored> "GET /serverindex.xml HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84
77.93.223.94 - - [25/Dec/2020:07:21:42 +0100] <censored> <censored> "GET /soapConfig.xml HTTP/1.1" 404 14361 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 25403
77.93.223.94 - - [25/Dec/2020:07:22:07 +0100] <censored> <censored> "GET /web.config HTTP/1.1" 429 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 4
77.93.223.94 - - [25/Dec/2020:07:22:08 +0100] <censored> <censored> "GET /web.xml HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 2572
77.93.223.94 - - [25/Dec/2020:07:22:11 +0100] <censored> <censored> "GET /weblogic.xml HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 9

@azurit azurit self-assigned this Dec 26, 2020
@azurit azurit added the 🚀 enhancement New feature or request label Dec 26, 2020
@dune73 dune73 mentioned this pull request Jan 4, 2021
Closed
@dune73
Copy link
Member
dune73 commented Jan 4, 2021 •
edited
Loading

This is a nice update. Thank you @azurit.

I wonder if we should really block README.md and CHANGELOG.md. I'm a bit torn. .md is not part of the restricted file extensions for example.

The rest of the additions looks very good to me.

@azurit
Copy link
Member Author
azurit commented Jan 4, 2021 •
edited
Loading

This was my thinking: Is extension .md intended for viewing on the web? I think no.

Lot's of open source software contains README.md and/or CHANGELOG.md file(s) and attackers are using them for detection of installed software name and version. If these files are not intended for web AND can reveal sensitive information, we should block them.

@dune73
Copy link
Member
dune73 commented Jan 4, 2021

I'm not convinced. It's true that most setups do not require you to view .md, but then there are also setups where you get the MD file and the client renders it. Besides people also use gitlab and stuff via the browser and that would lead to more FPs.

So I think we should discuss this.

@lifeforms lifeforms self-assigned this Jan 4, 2021
@lifeforms
Copy link
Member

Decision in project chat: merge after removal of the contested .md files.

@azurit
Copy link
Member Author
azurit commented Jan 5, 2021

@lifeforms Should be ready for merge.

@dune73
Copy link
Member
dune73 commented Jan 5, 2021

Link to project chat where decision was taken in Jan 2021:

@lifeforms lifeforms merged commit 35d4837 into coreruleset:v3.4/dev Jan 9, 2021
@lifeforms
Copy link
Member

Merged, thank you @azurit !

@dune73 dune73 mentioned this pull request Feb 1, 2021
Closed
@azurit azurit deleted the v3.4/restricted-files-update branch May 18, 2021 09:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@azurit azurit

@lifeforms lifeforms

Labels
🚀 enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@azurit @dune73 @lifeforms
0