#Software: Microsoft Internet Information Services 8.5
#Version: 1.0
#Date: 2018-04-02 03:14:00
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2018-04-02 03:13:59 W3SVC1993 LOTUS 143.95.252.43 GET / - 80 - 34.242.220.125 HTTP/1.1 Python/3.6+aiohttp/2.3.10 - - sawhney.net 302 0 0 331 121 359
2018-04-02 03:17:47 W3SVC1993 LOTUS 143.95.252.43 GET /.git/config - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 353 119 124
2018-04-02 03:17:47 W3SVC1993 LOTUS 143.95.252.43 GET /.svn/wc.db - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 351 118 124
2018-04-02 03:17:47 W3SVC1993 LOTUS 143.95.252.43 GET /.hg/hgrc - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 347 116 140
2018-04-02 03:17:47 W3SVC1993 LOTUS 143.95.252.43 GET /.ssh/id_rsa - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 353 119 125
2018-04-02 03:17:47 W3SVC1993 LOTUS 143.95.252.43 GET /.ssh/id_dsa - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 353 119 124
2018-04-02 03:17:47 W3SVC1993 LOTUS 143.95.252.43 GET /.ssh/id_ed25519 - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 361 123 124
2018-04-02 03:17:47 W3SVC1993 LOTUS 143.95.252.43 GET /.ssh/id_ecdsa - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 357 121 125
2018-04-02 03:17:48 W3SVC1993 LOTUS 143.95.252.43 GET /sftp_config.json - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 363 124 140
2018-04-02 03:17:48 W3SVC1993 LOTUS 143.95.252.43 GET /.idea/WebServers.xml - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 371 128 124
2018-04-02 03:17:48 W3SVC1993 LOTUS 143.95.252.43 GET /.DS_Store - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 349 117 124
2018-04-02 03:17:48 W3SVC1993 LOTUS 143.95.252.43 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 431 362 125
2018-04-02 03:17:48 W3SVC1993 LOTUS 143.95.252.43 POST /phpunit/phpunit/src/Util/PHP/eval-stdin.php - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 417 355 140
2018-04-02 03:17:48 W3SVC1993 LOTUS 143.95.252.43 POST /phpunit/phpunit/Util/PHP/eval-stdin.php - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 409 351 125
2018-04-02 03:17:48 W3SVC1993 LOTUS 143.95.252.43 POST /phpunit/src/Util/PHP/eval-stdin.php - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 401 347 125
2018-04-02 03:17:48 W3SVC1993 LOTUS 143.95.252.43 POST /phpunit/Util/PHP/eval-stdin.php - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 393 343 124
2018-04-02 03:17:49 W3SVC1993 LOTUS 143.95.252.43 POST /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 423 358 125
2018-04-02 03:17:49 W3SVC1993 LOTUS 143.95.252.43 POST /vendor/phpunit/src/Util/PHP/eval-stdin.php - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 415 354 125
2018-04-02 03:17:49 W3SVC1993 LOTUS 143.95.252.43 POST /vendor/phpunit/Util/PHP/eval-stdin.php - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 407 350 140
2018-04-02 03:17:49 W3SVC1993 LOTUS 143.95.252.43 POST /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 425 359 156
2018-04-02 03:17:49 W3SVC1993 LOTUS 143.95.252.43 POST /lib/phpunit/phpunit/Util/PHP/eval-stdin.php - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 417 355 140
2018-04-02 03:17:49 W3SVC1993 LOTUS 143.95.252.43 POST /lib/phpunit/src/Util/PHP/eval-stdin.php - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 409 351 124
2018-04-02 03:17:49 W3SVC1993 LOTUS 143.95.252.43 POST /lib/phpunit/Util/PHP/eval-stdin.php - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 401 347 125
2018-04-02 03:17:49 W3SVC1993 LOTUS 143.95.252.43 POST /wp-content/plugins/dzs-videogallery/class_parts/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 527 410 124
2018-04-02 03:17:50 W3SVC1993 LOTUS 143.95.252.43 POST /wp-content/plugins/jekyll-exporter/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 0 501 397 125
2018-04-02 03:17:50 W3SVC1993 LOTUS 143.95.252.43 POST /wp-content/plugins/cloudflare/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php - 80 - 5.188.9.80 HTTP/1.1 NYU+Internet+Census+(https://scan.lol;+research@scan.lol) - - sawhney.net 302 0 64 0 392 124
#Software: Microsoft Internet Information Services 8.5
#Version: 1.0
#Date: 2018-04-02 12:33:01
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2018-04-02 12:33:00 W3SVC1993 LOTUS 143.95.252.43 GET / - 80 - 42.236.99.206 HTTP/1.1 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/50.0.2661.102+Safari/537.36;+360Spider - http://sawhney.net/ sawhney.net 302 0 0 331 303 609
#Software: Microsoft Internet Information Services 8.5
#Version: 1.0
#Date: 2018-04-02 20:56:00
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2018-04-02 20:55:59 W3SVC1993 LOTUS 143.95.252.43 HEAD / - 80 - 35.189.227.50 HTTP/1.1 - - - www.sawhney.net 302 0 0 185 55 343
2018-04-02 20:55:59 W3SVC1993 LOTUS 143.95.252.43 GET / - 80 - 35.189.227.50 HTTP/1.1 - - - www.sawhney.net 302 0 0 331 54 125