The following is a mock-up of a Nginx web server access log. There are a few entries that might indicate someone is searching for an attack vector. Write a command that will do all of the following;
1. Read the lines from a file
2. Use a single regular expression to find all lines where;
Someone tried to access a file starting with a period (example ".htaccess")
OR
Someone attempted to open one of; "php.ini" or "wp.conf"
OR
Someone tried to retrieve a parent directory (example ".." somewhere in the URL)
3. Output a list of IP addresses without duplicates
access.log
10.10.38.12 - - [25/Aug/2018:00:13:00] "GET https://picard.zone/index.html HTTP/1.1 200 Mozilla/.05"
12.10.38.12 - - [25/Aug/2018:00:14:18] "GET https://picard.zone/catalog.html?id=5 200 Mozilla/5.0"
64.34.88.11 - - [25/Aug/2018:00:15:20] "GET https://picard.zone/catalog.html?id=30 200 Mozilla/5.0"
51.85.91.44 - - [25/Aug/2018:00:16:33] "GET https://picard.zone/specials/coupon.php 500 Mozilla/5.0"
1.1.1.1 - - [25/Aug/2018:00:16:40] "GET https://picard.zone/specials/.htaccess 500 Mozilla/5.0"
1.1.1.1 - - [25/Aug/2018:00:16:44] "GET https://picard.zone/specials/.settings 500 Mozilla/5.0"
192.168.1.100 - - [25/Aug/2018:00:16:50] "GET https://picard.zone/specials/wp.conf 500 Mozilla/5.0"
192.168.1.100 - - [25/Aug/2018:00:16:55] "GET https://picard.zone/specials/../settings.py 500 Mozilla/5.0"
4.2.2.2 - - [25/Aug/2018:00:16:58] "GET https://picard.zone/specials/php.ini 500 Mozilla/5.0"
11.22.33.44 - - [25/Aug/2018:00:17:42] "GET https://picard.zone/finish.php 200 Mozilla/5.0"
12.34.56.87 - - [25/Aug/2018:00:18:01] "GET https://picard.zone/settings.html 200 Mozilla/5.0"
12.34.56.87 - - [25/Aug/2018:00:19:12] "GET https://picard.zone/catalog.html?id=5 200 Mozilla/5.0"
12.34.56.87 - - [25/Aug/2018:00:20:11] "GET https://picard.zone/privacy.py 200 Mozilla/5.0"
10.10.38.12 - - [25/Aug/2018:00:13:38] "GET https://picard.zone/index.html HTTP/1.1 404 Mozilla/.05"
HINT: The lines you are interested in are in bold; lines 5 to 9.
HINT: In your terminal, create a new file called 'access.log' and copy-paste the above lines into it
HINT: You will likely need to use; cut, uniq and grep in your command