I know about the usual port sniffers and mass scanners that just pop up on any web server, but this one looks interesting to me.
I figured out so far that those requests aren't really an issue for my Development Flask Webserver, but I am curious what they are trying to do. The .env etc. are obvious, but what is the mechanic that these cryptic requests are trying to make use of? I assume some sort of special character code injection?
18.217.166.80 - - [01/Aug/2022 08:55:40] "POST /DAB_Webhook HTTP/1.1" 200 -
13.58.232.148 - - [01/Aug/2022 08:55:41] "POST /DAB_Webhook HTTP/1.1" 200 -
135.125.244.48 - - [01/Aug/2022 09:30:07] "POST / HTTP/1.1" 200 -
135.125.244.48 - - [01/Aug/2022 09:30:07] "GET /.env HTTP/1.1" 404 -
23.224.186.78 - - [01/Aug/2022 09:31:23] code 400, message Bad HTTP/0.9 request type ('\x16\x03\x01\x00±\x01\x00\x00\xad\x03\x03ÜZɦíPgTÿ\x91\x14Îó\x86\x98¹}#ö\x96\x8eùÕ\x1a.\x9e©G)\x88Þ<\x00\x00\x1aÀ/À+À\x11À\x07À\x13À')
23.224.186.78 - - [01/Aug/2022 09:31:23] "±ÜZɦíPgTÿÎó¹}#öùÕ.©G)Þ<À/À+ÀÀÀÀ ÀÀ" HTTPStatus.BAD_REQUEST -
23.224.186.78 - - [01/Aug/2022 09:31:36] "GET / HTTP/1.1" 200 -
23.224.186.78 - - [01/Aug/2022 09:31:38] "GET /favicon.ico HTTP/1.1" 404 -
23.224.186.78 - - [01/Aug/2022 09:31:40] "GET /robots.txt HTTP/1.1" 404 -
23.224.186.78 - - [01/Aug/2022 09:31:42] "GET /sitemap.xml HTTP/1.1" 404 -
163.123.143.71 - - [01/Aug/2022 09:49:10] "POST /boaform/admin/formLogin HTTP/1.1" 404 -
95.214.235.205 - - [01/Aug/2022 10:25:47] "GET /.env HTTP/1.1" 404 -
95.214.235.205 - - [01/Aug/2022 10:25:47] "POST / HTTP/1.1" 200 -
109.237.103.38 - - [01/Aug/2022 10:44:15] "GET /.env HTTP/1.1" 404 -
109.237.103.38 - - [01/Aug/2022 10:44:15] code 400, message Bad request version ("a\x00V\x13\x02\x13\x03\x13\x01À,À0À+À/̨̩\x00\x9f\x00\x9e̪À¯À\xadÀ®À¬À$À(À#À'À")
109.237.103.38 - - [01/Aug/2022 10:44:15] "C?ýO~kat·F×$o»Ê;/ï^hth ãÂiõm ÉîÉüxÒR°¾ÊºäjhMÀ¨Þ=¿Vå°
aVÀ,À0À+À/̨̩̪À¯ÀÀ®À¬À$À(À#À'À" HTTPStatus.BAD_REQUEST -
5.58.83.153 - - [01/Aug/2022 10:44:56] "GET / HTTP/1.1" 200 -
135.125.244.48 - - [01/Aug/2022 11:00:09] "POST / HTTP/1.1" 200 -
135.125.244.48 - - [01/Aug/2022 11:00:09] "GET /.env HTTP/1.1" 404 -
185.220.101.176 - - [01/Aug/2022 11:07:55] "GET http://169.254.169.254/latest/meta-data/ HTTP/1.1" 404 -
185.196.220.70 - - [01/Aug/2022 11:41:26] "GET / HTTP/1.1" 200 -