/var/log/apache2/domlogs/techb158/
/var/log/apache2/domlogs/techb158
NameSizeModeActions
abdallabala.techbala.com150971440640editdlrm
abdallabala.techbala.com-ssl_log327284480640editdlrm
aleamaralawal.com.techbala.com123310640editdlrm
aleamaralawal.com.techbala.com-ssl_log1281880640editdlrm
bala.techbala.ca00640editdlrm
bala.techbala.ca-ssl_log4110640editdlrm
bala.techbala.com00640editdlrm
bala.techbala.com-ssl_log00640editdlrm
balacoffee.com.techbala.com45890640editdlrm
balacoffee.com.techbala.com-ssl_log872220640editdlrm
balacoffees.techbala.com00640editdlrm
balacoffees.techbala.com-ssl_log00640editdlrm
balagrouptechnologies.techbala.com00640editdlrm
balagrouptechnologies.techbala.com-ssl_log00640editdlrm
belady-ly.techbala.com00640editdlrm
belady-ly.techbala.com-ssl_log00640editdlrm
beladygroup.techbala.com00640editdlrm
beladygroup.techbala.com-ssl_log00640editdlrm
carlosbeauregard.techbala.com00640editdlrm
carlosbeauregard.techbala.com-ssl_log00640editdlrm
charismaticmovers.techbala.com62810640editdlrm
charismaticmovers.techbala.com-ssl_log7620640editdlrm
chatmaster.techbala.com00640editdlrm
chatmaster.techbala.com-ssl_log00640editdlrm
christophe-lesage.techbala.com8080640editdlrm
christophe-lesage.techbala.com-ssl_log00640editdlrm
clicfinancement.techbala.com169350640editdlrm
clicfinancement.techbala.com-ssl_log1339250640editdlrm
clicfinancementca.techbala.com239800640editdlrm
clicfinancementca.techbala.com-ssl_log2029110640editdlrm
convergencesoft.ca.techbala.com301330640editdlrm
convergencesoft.ca.techbala.com-ssl_log217340640editdlrm
convergencesoft.techbala.com301330640editdlrm
convergencesoft.techbala.com-ssl_log866600640editdlrm
courtiersnetelite.techbala.com00640editdlrm
courtiersnetelite.techbala.com-ssl_log00640editdlrm
courtiersneteliteca.techbala.com00640editdlrm
courtiersneteliteca.techbala.com-ssl_log00640editdlrm
dany.techbala.com00640editdlrm
dany.techbala.com-ssl_log00640editdlrm
dev.aleamaralawal.com88840640editdlrm
dev.aleamaralawal.com-ssl_log112970640editdlrm
dev.balacoffee.com267548860640editdlrm
dev.balacoffee.com-ssl_log106564280640editdlrm
dlcrate.techbala.com00640editdlrm
dlcrate.techbala.com-ssl_log00640editdlrm
dominion.techbala.com00640editdlrm
dominion.techbala.com-ssl_log00640editdlrm
dominionbranch.techbala.com00640editdlrm
dominionbranch.techbala.com-ssl_log00640editdlrm
dominionhypothecairesca.techbala.com00640editdlrm
dominionhypothecairesca.techbala.com-ssl_log00640editdlrm
dominionhypothecairescom.techbala.com00640editdlrm
dominionhypothecairescom.techbala.com-ssl_log00640editdlrm
dominionlendingbranch.techbala.com00640editdlrm
dominionlendingbranch.techbala.com-ssl_log00640editdlrm
equipeballaro.techbala.com00640editdlrm
equipeballaro.techbala.com-ssl_log00640editdlrm
equipeballaroca.techbala.com00640editdlrm
equipeballaroca.techbala.com-ssl_log00640editdlrm
eshop.techbala.com00640editdlrm
eshop.techbala.com-ssl_log00640editdlrm
ex.abdallabala.com00640editdlrm
ex.abdallabala.com-ssl_log00640editdlrm
ex.techbala.com00640editdlrm
ex.techbala.com-ssl_log4120640editdlrm
exp.abdallabala.com2402810640editdlrm
exp.abdallabala.com-ssl_log43470640editdlrm
expense.abdallabala.com00640editdlrm
expense.abdallabala.com-ssl_log4550640editdlrm
family.techbala.com00640editdlrm
family.techbala.com-ssl_log00640editdlrm
financementhypotheque.com.techbala.com00640editdlrm
financementhypotheque.com.techbala.com-ssl_log00640editdlrm
francisgallanthypotheque.techbala.com32990640editdlrm
francisgallanthypotheque.techbala.com-ssl_log132290640editdlrm
frantzihypotheque.techbala.com90880640editdlrm
frantzihypotheque.techbala.com-ssl_log228400640editdlrm
geodominion.techbala.com00640editdlrm
geodominion.techbala.com-ssl_log00640editdlrm
gfelite.techbala.com00640editdlrm
gfelite.techbala.com-ssl_log00640editdlrm
groupetransit.techbala.com00640editdlrm
groupetransit.techbala.com-ssl_log00640editdlrm
hypotheque-pret.techbala.com00640editdlrm
hypotheque-pret.techbala.com-ssl_log00640editdlrm
hypothequecenter.techbala.com00640editdlrm
hypothequecenter.techbala.com-ssl_log00640editdlrm
hypothequechristinelemieux.techbala.com22350640editdlrm
hypothequechristinelemieux.techbala.com-ssl_log401570640editdlrm
hypothequemultilogement.techbala.com00640editdlrm
hypothequemultilogement.techbala.com-ssl_log00640editdlrm
hypothequephenix.techbala.com499280640editdlrm
hypothequephenix.techbala.com-ssl_log1172630640editdlrm
hypothequepretweb.techbala.com00640editdlrm
hypothequepretweb.techbala.com-ssl_log00640editdlrm
hypothequesanssoucis.techbala.com00640editdlrm
hypothequesanssoucis.techbala.com-ssl_log00640editdlrm
hypothequetoimieux.techbala.com89380640editdlrm
hypothequetoimieux.techbala.com-ssl_log186940640editdlrm
ictcreations.ca.techbala.com00640editdlrm
ictcreations.ca.techbala.com-ssl_log00640editdlrm
ictcreations.techbala.com00640editdlrm
ictcreations.techbala.com-ssl_log00640editdlrm
ileadtechnologies.techbala.com202550640editdlrm
ileadtechnologies.techbala.com-ssl_log1537630640editdlrm
ileadtechnology.com.techbala.com264730640editdlrm
ileadtechnology.com.techbala.com-ssl_log1595720640editdlrm
immovalet.ca.techbala.com83901130640editdlrm
immovalet.ca.techbala.com-ssl_log82674150640editdlrm
immovalet.techbala.com643075360640editdlrm
immovalet.techbala.com-ssl_log213536130640editdlrm
immovaletca.techbala.com00640editdlrm
immovaletca.techbala.com-ssl_log00640editdlrm
l2hypotheques.com.techbala.com1831010640editdlrm
l2hypotheques.com.techbala.com-ssl_log2279260640editdlrm
landingpage.techbala.com00640editdlrm
landingpage.techbala.com-ssl_log00640editdlrm
lazrqlojistik.com.techbala.com2078047910640editdlrm
lazrqlojistik.com.techbala.com-ssl_log70127750640editdlrm
loginsystem.techbala.com00640editdlrm
loginsystem.techbala.com-ssl_log00640editdlrm
longwaymovingexperts.com.techbala.com00640editdlrm
longwaymovingexperts.com.techbala.com-ssl_log00640editdlrm
marinamendeleva.techbala.com31270640editdlrm
marinamendeleva.techbala.com-ssl_log49130640editdlrm
masuccursale.clicfinancement.com00640editdlrm
masuccursale.clicfinancement.com-ssl_log00640editdlrm
masuccursale.techbala.com00640editdlrm
masuccursale.techbala.com-ssl_log00640editdlrm
masuccursaledominion.techbala.com00640editdlrm
masuccursaledominion.techbala.com-ssl_log00640editdlrm
masuccursaledominionca.techbala.com3200640editdlrm
masuccursaledominionca.techbala.com-ssl_log00640editdlrm
matthieust-laurent.techbala.com24630640editdlrm
matthieust-laurent.techbala.com-ssl_log60980640editdlrm
maxautos.techbala.com81090640editdlrm
maxautos.techbala.com-ssl_log99710640editdlrm
metroimmobilier.techbala.com00640editdlrm
metroimmobilier.techbala.com-ssl_log00640editdlrm
metroimmobilierca.techbala.com00640editdlrm
metroimmobilierca.techbala.com-ssl_log00640editdlrm
monphenix.techbala.com791851990640editdlrm
monphenix.techbala.com-ssl_log2125141300640editdlrm
monphenixcs.techbala.com2381133540640editdlrm
monphenixcs.techbala.com-ssl_log488818920640editdlrm
multilogementsclub.techbala.com00640editdlrm
multilogementsclub.techbala.com-ssl_log00640editdlrm
my.techbala.com2644790640editdlrm
my.techbala.com-ssl_log1927170640editdlrm
mydoiniontest.techbala.com00640editdlrm
mydoiniontest.techbala.com-ssl_log00640editdlrm
mydominionbranch.techbala.com00640editdlrm
mydominionbranch.techbala.com-ssl_log00640editdlrm
mydominionbranchca.techbala.com00640editdlrm
mydominionbranchca.techbala.com-ssl_log00640editdlrm
myrate.techbala.com00640editdlrm
myrate.techbala.com-ssl_log00640editdlrm
myratebid.techbala.com48890640editdlrm
myratebid.techbala.com-ssl_log2527940640editdlrm
myreport.techbala.com00640editdlrm
myreport.techbala.com-ssl_log00640editdlrm
mytest.techbala.com00640editdlrm
mytest.techbala.com-ssl_log00640editdlrm
mytradingreport.techbala.com00640editdlrm
mytradingreport.techbala.com-ssl_log00640editdlrm
myweb.techbala.com00640editdlrm
myweb.techbala.com-ssl_log00640editdlrm
n8n.abdallabala.com00640editdlrm
n8n.abdallabala.com-ssl_log00640editdlrm
n8n.ileadtechnology.com2180640editdlrm
n8n.ileadtechnology.com-ssl_log9600640editdlrm
nathalielegerhypotheque.techbala.com25040640editdlrm
nathalielegerhypotheque.techbala.com-ssl_log172460640editdlrm
newlocation.techbala.com00640editdlrm
newlocation.techbala.com-ssl_log00640editdlrm
newmap.techbala.com00640editdlrm
newmap.techbala.com-ssl_log00640editdlrm
newmyratebid.techbala.com00640editdlrm
newmyratebid.techbala.com-ssl_log00640editdlrm
on-time-movers.com.techbala.com215886120640editdlrm
on-time-movers.com.techbala.com-ssl_log29708510640editdlrm
on-time-movers.techbala.com00640editdlrm
on-time-movers.techbala.com-ssl_log00640editdlrm
pierredewolffinance.techbala.com00640editdlrm
pierredewolffinance.techbala.com-ssl_log00640editdlrm
placechurchill.techbala.com00640editdlrm
placechurchill.techbala.com-ssl_log00640editdlrm
placechurchillca.techbala.com00640editdlrm
placechurchillca.techbala.com-ssl_log00640editdlrm
pneus-parfait.techbala.com00640editdlrm
pneus-parfait.techbala.com-ssl_log00640editdlrm
pneusparfait.com.techbala.com336560640editdlrm
pneusparfait.com.techbala.com-ssl_log29940640editdlrm
polimedica-tr.techbala.com00640editdlrm
polimedica-tr.techbala.com-ssl_log00640editdlrm
pret-hypothecaire-laval.com.techbala.com00640editdlrm
pret-hypothecaire-laval.com.techbala.com-ssl_log00640editdlrm
pret-hypothecaire-montreal.com.techbala.com00640editdlrm
pret-hypothecaire-montreal.com.techbala.com-ssl_log00640editdlrm
prets-hypotheque-dominion.techbala.com00640editdlrm
prets-hypotheque-dominion.techbala.com-ssl_log00640editdlrm
prets-hypothequefrancineperrier-ca.techbala.com00640editdlrm
prets-hypothequefrancineperrier-ca.techbala.com-ssl_log00640editdlrm
prets-hypothequefrancineperrier.techbala.com00640editdlrm
prets-hypothequefrancineperrier.techbala.com-ssl_log00640editdlrm
prets-hypotheques-quebec.com.techbala.com00640editdlrm
prets-hypotheques-quebec.com.techbala.com-ssl_log00640editdlrm
pretshypothequecom.techbala.com00640editdlrm
pretshypothequecom.techbala.com-ssl_log00640editdlrm
primomovers.techbala.com143356780640editdlrm
primomovers.techbala.com-ssl_log1574470640editdlrm
primomoversca.techbala.com448670640editdlrm
primomoversca.techbala.com-ssl_log8308900640editdlrm
report.techbala.com00640editdlrm
report.techbala.com-ssl_log00640editdlrm
secondlend.techbala.com00640editdlrm
secondlend.techbala.com-ssl_log00640editdlrm
sharing.techbala.com00640editdlrm
sharing.techbala.com-ssl_log00640editdlrm
skinny-movers.techbala.com00640editdlrm
skinny-movers.techbala.com-ssl_log00640editdlrm
solutionshypotheque.techbala.com435920640editdlrm
solutionshypotheque.techbala.com-ssl_log714010640editdlrm
ssl.techbala.com00640editdlrm
ssl.techbala.com-ssl_log00640editdlrm
subroot.techbala.com00640editdlrm
subroot.techbala.com-ssl_log00640editdlrm
sum.myreport.techbala.com00640editdlrm
sum.myreport.techbala.com-ssl_log00640editdlrm
sum.techbala.com00640editdlrm
sum.techbala.com-ssl_log1580640editdlrm
sumtest.techbala.com00640editdlrm
sumtest.techbala.com-ssl_log00640editdlrm
sumtradingreports.techbala.com00640editdlrm
sumtradingreports.techbala.com-ssl_log00640editdlrm
techbala.ca.techbala.com2093128740640editdlrm
techbala.ca.techbala.com-ssl_log25339340640editdlrm
techbala.com10256100640editdlrm
techbala.com-ssl_log658094420640editdlrm
techbala.techbala.com79130640editdlrm
techbala.techbala.com-ssl_log225890640editdlrm
test.techbala.com00640editdlrm
test.techbala.com-ssl_log4140640editdlrm
testbala.techbala.com00640editdlrm
testbala.techbala.com-ssl_log00640editdlrm
trend.techbala.com00640editdlrm
trend.techbala.com-ssl_log00640editdlrm
trendlyall.techbala.com00640editdlrm
trendlyall.techbala.com-ssl_log00640editdlrm
unehypotheque.techbala.com00640editdlrm
unehypotheque.techbala.com-ssl_log00640editdlrm
upload.abdallabala.com00640editdlrm
upload.abdallabala.com-ssl_log00640editdlrm
uploadmetro.techbala.com00640editdlrm
uploadmetro.techbala.com-ssl_log00640editdlrm
valet.immovalet.com00640editdlrm
valet.immovalet.com-ssl_log00640editdlrm
valet.techbala.com00640editdlrm
valet.techbala.com-ssl_log00640editdlrm
valetm.techbala.com00640editdlrm
valetm.techbala.com-ssl_log00640editdlrm
votresuccursale.ca.techbala.com00640editdlrm
votresuccursale.ca.techbala.com-ssl_log00640editdlrm
votresuccursale.techbala.com00640editdlrm
votresuccursale.techbala.com-ssl_log00640editdlrm
votresuccursalehypothecaireca.techbala.com00640editdlrm
votresuccursalehypothecaireca.techbala.com-ssl_log00640editdlrm
votresuccursalehypothecairecom.techbala.com00640editdlrm
votresuccursalehypothecairecom.techbala.com-ssl_log00640editdlrm
wafertraining.techbala.com00640editdlrm
wafertraining.techbala.com-ssl_log00640editdlrm
web.techbala.com00640editdlrm
web.techbala.com-ssl_log4130640editdlrm
workloadmatch.techbala.com137690640editdlrm
workloadmatch.techbala.com-ssl_log2937920640editdlrm
_wildcard_.techbala.com2233190640editdlrm
_wildcard_.techbala.com-ssl_log19275550640editdlrm
Edit: /var/log/apache2/domlogs/techb158/clicfinancementca.techbala.com-ssl_log (202911B)
104.238.222.26 - - [04/Sep/2026:12:09:20 +0000] "GET /wp-login.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 104.238.222.26 - - [04/Sep/2026:12:09:22 +0000] "GET /wp-admin/ HTTP/1.1" 500 724 "https://wordpress.org/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.246.253.24 - - [04/Sep/2026:12:41:17 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 44.195.30.193 - - [04/Sep/2026:13:04:19 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 216.73.216.203 - - [04/Sep/2026:13:04:42 +0000] "GET /robots.txt HTTP/1.1" 200 26 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 34.34.146.77 - - [04/Sep/2026:13:05:51 +0000] "GET / HTTP/1.1" 200 39880 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.34.146.77 - - [04/Sep/2026:13:07:30 +0000] "GET /unprotected/json-minified.js HTTP/1.1" 200 1562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.34.146.77 - - [04/Sep/2026:13:07:30 +0000] "GET /unprotected/json-minified.js.map HTTP/1.1" 500 796 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 161.115.234.177 - - [04/Sep/2026:13:11:10 +0000] "GET / HTTP/1.1" 200 482 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 Edg/99.0.1150.30" 121.91.86.77 - - [04/Sep/2026:13:15:39 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 121.91.86.77 - - [04/Sep/2026:13:15:40 +0000] "GET /ads.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 205.210.31.214 - - [04/Sep/2026:13:18:10 +0000] "GET / HTTP/1.1" 200 40068 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.prod HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.local HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /_ignition/health-check HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.backup HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.save HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /wp-config.php.bak HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.example HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /wp-config.php.swp HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /env HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.old HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /storage/logs/laravel.log HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.production HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /actuator/configprops HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /crusader-404-probe HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /actuator/env HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.dev HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.bak HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /wp-config.php~ HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.production HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.save HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.local HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.old HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.dev HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.example HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.bak HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /wp-config.php~ HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /storage/logs/laravel.log HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /actuator/configprops HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /_ignition/health-check HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /wp-config.php.swp HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.prod HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /actuator/env HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /crusader-404-probe HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /env HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.backup HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /wp-config.php.bak HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 54.234.120.76 - - [04/Sep/2026:13:52:30 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 18.159.96.7 - - [04/Sep/2026:13:53:42 +0000] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; DefaultsExposed/1.0; +https://defaults.exposed/headers)" 20.151.10.161 - - [04/Sep/2026:13:56:26 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:26 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:26 +0000] "GET /ba.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:26 +0000] "GET /great.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:26 +0000] "GET /dyt8mjxc3yofbkoriukvgjaCdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:26 +0000] "GET /robots.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /sky.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /k.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /w.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /FWAZ.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /blurbs.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /ccc.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /images.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /alls.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /red.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /admin.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /file52.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /geck.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /biufile.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /dejavu.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /aaf.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /h02ugyh.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /155.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /ops.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /mac.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /makeasmtp.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /pucci.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /puc.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /8.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /1.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /admin.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /edit.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /inputs.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /av.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /classwithtostring.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /adminfuns.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /ms-edit.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /222.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /BDKR28WP.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /wp.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /abcd.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /simple.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /chosen.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /als.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /file65.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /admin.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /bless.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /f35.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /aaa.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /gecko.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /xiugai.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /adminner.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /inx.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /11.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /File.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /a3ampzmbipnkpxeqhqpsanCdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /4PJcpMFsD8B.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /i99z7zzbwtpteujvv6s8hiCdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /gwaih1gfzp5vuwr04Cdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /1wvekeybd9it2di2vyipgr6Cdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /media.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /inso.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /shiny.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /403dd.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /baba.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /site.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /cabs.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /insc.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /file.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /dex.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /key.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /kir.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /nofile.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /fling.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /btyuio.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /or.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /mails.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /sm.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /araso.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /a.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /sb.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-content/index.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-includes/ID3/about.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-admin/css/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-includes/blocks/details/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-includes/blocks/audio/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-temp.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-admin/js/index.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-includes/Requests/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-content/admin.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /av.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-goods.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-includes/js/jquery/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /cgi-bin/index.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-includes/l10n/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-manager.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /cgi-bin/admin.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-content/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp-includes/block-bindings/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp-includes/assets/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp-admin/network/plugins.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp-admin/maint/index.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /qazwsx.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /cae2.2.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /b8.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /xs.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp-content/uploads/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp_blog_footer.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /billzgs.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /CAE-2.5.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /0.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /v4on3fxtoo5z5cq0yCdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /8xmlr9ommwdy3ro8dCdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /fms.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /0day.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /das.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /wss.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /fw.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /waa.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /By4mzbsowFX.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /selrfiem.php HTTP/1.1" 401 36 "-" "-" 87.58.197.202 - - [04/Sep/2026:14:13:49 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 80.94.92.175 - - [04/Sep/2026:14:16:28 +0000] "GET /.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 103.160.172.244 - - [04/Sep/2026:14:48:26 +0000] "POST /xmlrpc.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.0.0 Safari/537.36" 3.18.186.238 - - [04/Sep/2026:14:49:44 +0000] "GET / HTTP/1.1" 200 482 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 198.235.24.133 - - [04/Sep/2026:14:57:53 +0000] "GET / HTTP/1.1" 401 36 "http://cpcontacts.clicfinancement.ca/" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 87.58.197.202 - - [04/Sep/2026:15:06:54 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.dev HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.example HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.bak HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.prod HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.local HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /actuator/env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /crusader-404-probe HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /wp-config.php.swp HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.backup HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.production HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /actuator/configprops HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.old HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.save HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /storage/logs/laravel.log HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /_ignition/health-check HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /wp-config.php~ HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /wp-config.php.bak HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:54 +0000] "GET /.env. HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:54 +0000] "GET / HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:54 +0000] "GET /.ENV HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:54 +0000] "GET /.env/ HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:54 +0000] "GET //.env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:54 +0000] "GET /%2eenv HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:54 +0000] "GET /.env;.png HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.backup HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /wp-config.php.swp HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.production HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.bak HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /wp-config.php~ HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /_ignition/health-check HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /wp-config.php.bak HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.example HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.prod HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.old HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /storage/logs/laravel.log HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.local HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /crusader-404-probe HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.save HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.dev HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /actuator/env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /actuator/configprops HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:32 +0000] "GET /.env/ HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:32 +0000] "GET / HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:32 +0000] "GET //.env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:32 +0000] "GET /%2eenv HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:32 +0000] "GET /.ENV HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:32 +0000] "GET /.env. HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:32 +0000] "GET /.env;.png HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 104.152.52.120 - - [04/Sep/2026:15:23:31 +0000] "GET / HTTP/1.1" 200 482 "-" "curl/7.61.1" 104.152.52.120 - - [04/Sep/2026:15:23:31 +0000] "GET /favicon.ico HTTP/1.1" 500 724 "-" "curl/7.61.1" 216.73.216.203 - - [04/Sep/2026:15:38:22 +0000] "GET /robots.txt HTTP/1.1" 200 26 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /public/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /htdocs/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /src/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /www/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /html/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /wordpress/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /backend/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /api/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /app/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /var/www/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /site/.git/config HTTP/1.1" 502 5318 "-" "crusader-worker/1.0" 52.90.150.115 - - [04/Sep/2026:15:52:50 +0000] "POST / HTTP/1.1" 500 - "https://clicfinancementca.techbala.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 85.208.96.207 - - [04/Sep/2026:15:58:36 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)" 104.208.72.93 - - [04/Sep/2026:15:58:41 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.170.167.18 - - [04/Sep/2026:15:58:45 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (compatible; BacklinksExtendedBot)" 20.214.149.209 - - [04/Sep/2026:16:00:39 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 44.195.30.193 - - [04/Sep/2026:16:21:11 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:43 +0000] "GET / HTTP/1.1" 200 12490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:45 +0000] "GET /autoload_classmap.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:45 +0000] "GET /post.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:45 +0000] "GET /1.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:45 +0000] "GET /flower.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:45 +0000] "GET /admin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:46 +0000] "GET /file.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:46 +0000] "GET /meta.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:46 +0000] "GET /index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:46 +0000] "GET /abcd.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:47 +0000] "GET /about.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:47 +0000] "GET /randkeyword.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:47 +0000] "GET /goods.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:47 +0000] "GET /hehe.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:47 +0000] "GET /user.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:48 +0000] "GET /wp-2019.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:48 +0000] "GET /chosen.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:48 +0000] "GET /functions.phpA HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:48 +0000] "GET /cron.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:48 +0000] "GET /edit.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:49 +0000] "GET /gecko-new.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:49 +0000] "GET /cookie.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:49 +0000] "GET /xleet.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:49 +0000] "GET /spip.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:50 +0000] "GET /22.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:50 +0000] "GET /room.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:50 +0000] "GET /disagreed.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:50 +0000] "GET /text.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:50 +0000] "GET /alfa-rex.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:51 +0000] "GET /alfa-rex.php7 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:51 +0000] "GET /feeds.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:51 +0000] "GET /radio.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:51 +0000] "GET /dropdown.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:52 +0000] "GET /defaults.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:52 +0000] "GET /system.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:52 +0000] "GET /xmlrpc.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:52 +0000] "GET /xmlrpc.php0 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:52 +0000] "GET /colors.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:53 +0000] "GET /updates.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:53 +0000] "GET /alfa-rex1.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:53 +0000] "GET /wp-index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:53 +0000] "GET /wp-admin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:53 +0000] "GET /alfa.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:54 +0000] "GET /alfanew.php7 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:54 +0000] "GET /locale.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:54 +0000] "GET /wxo.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:54 +0000] "GET /colour.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:55 +0000] "GET /files.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:55 +0000] "GET /install.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:55 +0000] "GET /wp-contentt.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:55 +0000] "GET /config.php7 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:55 +0000] "GET /config.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:56 +0000] "GET /theme.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:56 +0000] "GET /block-bindings.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:56 +0000] "GET /class_api.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:56 +0000] "GET /inputs.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:57 +0000] "GET /root.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:57 +0000] "GET /menu.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:57 +0000] "GET /plugin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:57 +0000] "GET /cloud.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:57 +0000] "GET /configs.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:58 +0000] "GET /wp-configs.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:58 +0000] "GET /update.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:58 +0000] "GET /2.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:58 +0000] "GET /input.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:58 +0000] "GET /aaa.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 54.234.120.76 - - [04/Sep/2026:17:08:48 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 74.7.230.55 - - [04/Sep/2026:17:10:48 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.228.20 - - [04/Sep/2026:17:10:48 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.241.141 - - [04/Sep/2026:17:10:48 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.244.1 - - [04/Sep/2026:17:10:48 +0000] "GET /robots.txt HTTP/1.1" 401 53 "http://cpcalendars.clicfinancement.ca/robots.txt" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.230.24 - - [04/Sep/2026:17:10:48 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.230.28 - - [04/Sep/2026:17:10:48 +0000] "GET /robots.txt HTTP/1.1" 401 53 "http://cpcontacts.clicfinancement.ca/robots.txt" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.228.32 - - [04/Sep/2026:17:10:49 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.244.18 - - [04/Sep/2026:17:10:49 +0000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "http://autodiscover.clicfinancement.ca/robots.txt" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.244.1 - - [04/Sep/2026:17:10:51 +0000] "GET /robots.txt HTTP/1.1" 200 26 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.230.28 - - [04/Sep/2026:17:10:51 +0000] "GET /robots.txt HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.244.1 - - [04/Sep/2026:17:10:51 +0000] "GET /robots.txt HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.227.9 - - [04/Sep/2026:17:10:51 +0000] "GET /wp-admin/setup-config.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:10:51 +0000] "GET /wp-admin/class.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.242.36 - - [04/Sep/2026:17:10:51 +0000] "GET /wp-includes/css/buttons.css HTTP/1.1" 401 53 "http://cpcontacts.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.241.13 - - [04/Sep/2026:17:10:51 +0000] "GET /media/system/js/core.js HTTP/1.1" 401 53 "http://cpcalendars.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.244.18 - - [04/Sep/2026:17:10:51 +0000] "GET /robots.txt HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.243.193 - - [04/Sep/2026:17:10:54 +0000] "GET /buy.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.242.36 - - [04/Sep/2026:17:10:54 +0000] "GET /media/system/js/core.js HTTP/1.1" 401 53 "http://cpcontacts.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.241.13 - - [04/Sep/2026:17:10:54 +0000] "GET /wp-includes/css/buttons.css HTTP/1.1" 401 53 "http://cpcalendars.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:10:54 +0000] "GET /wp-admin/update.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:10:57 +0000] "GET /bolt.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:10:58 +0000] "GET /wp-admin/themes.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:00 +0000] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:03 +0000] "GET /ab.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:11:05 +0000] "GET /wp-admin/ HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:06 +0000] "GET /000.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:09 +0000] "GET /wp-admin/css/colors/lock.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:12 +0000] "GET /wp-admin/wp-config-backup.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:15 +0000] "GET /wp-admin/maint/src/xth/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:11:15 +0000] "GET /wp-admin/update-core.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:18 +0000] "GET /wp-admin/images/html-api/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:21 +0000] "GET /wp-blog-header.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:24 +0000] "GET /wp-content/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:27 +0000] "GET /wp-content.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:30 +0000] "GET /wp-admin/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:11:30 +0000] "GET /wp-login.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:33 +0000] "GET /2.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:36 +0000] "GET /wp-admin.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:39 +0000] "GET /admin.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:41 +0000] "GET /system_core.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:45 +0000] "GET /system_log.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:48 +0000] "GET /ioxi-o.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:11:50 +0000] "GET /wp-admin/theme-install.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:50 +0000] "GET /aboutc.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:53 +0000] "GET /private/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:57 +0000] "GET /session_init.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:00 +0000] "GET /upload/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:03 +0000] "GET /images/ HTTP/1.1" 200 12490 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:05 +0000] "GET /admin/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:08 +0000] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 401 12503 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:12:10 +0000] "GET /wp-admin/css/install.min.css HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:10 +0000] "GET /themes.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:13 +0000] "GET /chosen.php HTTP/1.1" 401 12513 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:15 +0000] "GET /inputs.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:18 +0000] "GET /simple.php HTTP/1.1" 401 12509 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:20 +0000] "GET /system.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:23 +0000] "GET /item.php HTTP/1.1" 401 12513 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:25 +0000] "GET /wa/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:27 +0000] "GET /class.api.php HTTP/1.1" 401 12500 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:30 +0000] "GET /.well-known/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:12:30 +0000] "GET /wp-admin/install.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:32 +0000] "GET /worksec.php HTTP/1.1" 401 12508 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:34 +0000] "GET /adminfuns.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:37 +0000] "GET /bless.php HTTP/1.1" 401 12503 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:39 +0000] "GET /click.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:42 +0000] "GET /goods.php HTTP/1.1" 401 12511 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:44 +0000] "GET /shell.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:46 +0000] "GET /options.php HTTP/1.1" 401 12513 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:49 +0000] "GET /a.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:12:50 +0000] "GET /wp-admin/about.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:51 +0000] "GET /t.php HTTP/1.1" 401 12496 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:54 +0000] "GET /m.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:56 +0000] "GET /rip.php HTTP/1.1" 401 12509 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:59 +0000] "GET /num.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:01 +0000] "GET /new.php HTTP/1.1" 401 12501 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:03 +0000] "GET /mah.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:06 +0000] "GET /log.php HTTP/1.1" 401 12510 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:08 +0000] "GET /mini.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:10 +0000] "GET /ahax.php HTTP/1.1" 401 12510 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:13 +0000] "GET /abcd.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:15 +0000] "GET /file.php HTTP/1.1" 401 12501 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:18 +0000] "GET /edit.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:20 +0000] "GET /root.php HTTP/1.1" 401 12496 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:22 +0000] "GET /1.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:25 +0000] "GET /wp-config-sample.php HTTP/1.1" 401 12511 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:27 +0000] "GET /database.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:29 +0000] "GET /classwithtostring.php HTTP/1.1" 401 12500 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:32 +0000] "GET /files.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:34 +0000] "GET /radio.php HTTP/1.1" 401 12510 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:37 +0000] "GET /about.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:39 +0000] "GET /first.php HTTP/1.1" 401 12511 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:42 +0000] "GET /file-mancvgertdxz.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:44 +0000] "GET /install.php HTTP/1.1" 401 12504 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:46 +0000] "GET /app.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:49 +0000] "GET /we.php HTTP/1.1" 401 12512 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:51 +0000] "GET /fm.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:54 +0000] "GET /vx.php HTTP/1.1" 401 12501 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:56 +0000] "GET /as.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:58 +0000] "GET /user.php HTTP/1.1" 401 12500 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:14:01 +0000] "GET /wp-admin/widgets-form-blocks-interface.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:14:03 +0000] "GET /scanner3.php HTTP/1.1" 401 12511 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:14:06 +0000] "GET /aa.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:14:08 +0000] "GET /filemanager.php HTTP/1.1" 401 12509 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 20.198.7.31 - - [04/Sep/2026:17:19:05 +0000] "GET / HTTP/1.1" 200 12489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:05 +0000] "GET /autoload_classmap.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:06 +0000] "GET /post.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:06 +0000] "GET /1.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:06 +0000] "GET /flower.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:06 +0000] "GET /admin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:06 +0000] "GET /file.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:07 +0000] "GET /meta.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:07 +0000] "GET /index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:07 +0000] "GET /abcd.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:07 +0000] "GET /about.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:07 +0000] "GET /randkeyword.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:08 +0000] "GET /goods.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:08 +0000] "GET /hehe.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:08 +0000] "GET /user.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:08 +0000] "GET /wp-2019.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:08 +0000] "GET /chosen.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:09 +0000] "GET /functions.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:09 +0000] "GET /cron.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:09 +0000] "GET /edit.phpA HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:09 +0000] "GET /gecko-new.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:09 +0000] "GET /cookie.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:10 +0000] "GET /xleet.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:10 +0000] "GET /spip.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:10 +0000] "GET /22.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:10 +0000] "GET /room.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:10 +0000] "GET /disagreed.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:11 +0000] "GET /text.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:11 +0000] "GET /alfa-rex.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:11 +0000] "GET /alfa-rex.php7 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:11 +0000] "GET /feeds.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:11 +0000] "GET /radio.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:12 +0000] "GET /dropdown.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:12 +0000] "GET /defaults.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:12 +0000] "GET /system.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:12 +0000] "GET /xmlrpc.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:13 +0000] "GET /xmlrpc.php0 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:13 +0000] "GET /colors.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:13 +0000] "GET /updates.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:13 +0000] "GET /alfa-rex1.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:13 +0000] "GET /wp-index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:14 +0000] "GET /wp-admin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:14 +0000] "GET /alfa.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:14 +0000] "GET /alfanew.php7 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:14 +0000] "GET /locale.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:14 +0000] "GET /wxo.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:15 +0000] "GET /colour.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:15 +0000] "GET /files.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:15 +0000] "GET /install.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:15 +0000] "GET /wp-contentt.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:15 +0000] "GET /config.php7 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:16 +0000] "GET /config.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:16 +0000] "GET /theme.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:16 +0000] "GET /block-bindings.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:16 +0000] "GET /class_api.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:16 +0000] "GET /inputs.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:17 +0000] "GET /root.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:17 +0000] "GET /menu.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:17 +0000] "GET /plugin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:17 +0000] "GET /cloud.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:17 +0000] "GET /configs.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:18 +0000] "GET /wp-configs.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:18 +0000] "GET /update.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:18 +0000] "GET /2.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:18 +0000] "GET /input.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:18 +0000] "GET /aaa.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.178.110.66 - - [04/Sep/2026:17:21:25 +0000] "GET /api/session/properties HTTP/1.1" 500 724 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" 216.73.216.203 - - [04/Sep/2026:17:35:41 +0000] "GET /robots.txt HTTP/1.1" 200 26 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 51.15.215.70 - - [04/Sep/2026:18:25:39 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:18:35:32 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:18:35:32 +0000] "GET /autoload_classmap.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:18:35:33 +0000] "GET /post.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:18:35:33 +0000] "GET /1.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:18:35:34 +0000] "GET /flower.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:18:35:35 +0000] "GET /admin.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:18:35:36 +0000] "GET /file.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:51 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:51 +0000] "GET /autoload_classmap.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:52 +0000] "GET /post.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:53 +0000] "GET /1.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:53 +0000] "GET /flower.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:54 +0000] "GET /admin.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:55 +0000] "GET /file.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:56 +0000] "GET /meta.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:57 +0000] "GET /index.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:57 +0000] "GET /abcd.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:58 +0000] "GET /about.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:59 +0000] "GET /randkeyword.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:00 +0000] "GET /goods.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:00 +0000] "GET /hehe.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:01 +0000] "GET /user.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:02 +0000] "GET /wp-2019.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:03 +0000] "GET /chosen.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:04 +0000] "GET /functions.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:04 +0000] "GET /cron.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:05 +0000] "GET /edit.phpA HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:06 +0000] "GET /gecko-new.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:07 +0000] "GET /cookie.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:07 +0000] "GET /xleet.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:08 +0000] "GET /spip.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:09 +0000] "GET /22.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:10 +0000] "GET /room.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:11 +0000] "GET /disagreed.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:11 +0000] "GET /text.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:12 +0000] "GET /alfa-rex.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:13 +0000] "GET /alfa-rex.php7 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:14 +0000] "GET /feeds.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:14 +0000] "GET /radio.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:15 +0000] "GET /dropdown.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:16 +0000] "GET /defaults.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:17 +0000] "GET /system.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:18 +0000] "GET /xmlrpc.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:18 +0000] "GET /xmlrpc.php0 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:19 +0000] "GET /colors.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:20 +0000] "GET /updates.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:21 +0000] "GET /alfa-rex1.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:21 +0000] "GET /wp-index.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:22 +0000] "GET /wp-admin.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:23 +0000] "GET /alfa.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:24 +0000] "GET /alfanew.php7 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:24 +0000] "GET /locale.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:25 +0000] "GET /wxo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:26 +0000] "GET /colour.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:27 +0000] "GET /files.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:28 +0000] "GET /install.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:29 +0000] "GET /config.php7 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:29 +0000] "GET /config.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:30 +0000] "GET /theme.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:31 +0000] "GET /block-bindings.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:32 +0000] "GET /class_api.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:32 +0000] "GET /inputs.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:33 +0000] "GET /root.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:34 +0000] "GET /menu.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:35 +0000] "GET /plugin.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.243.46.220 - - [04/Sep/2026:18:50:00 +0000] "GET /.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /backup.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /backup.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /backup.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /backup.tgz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /backup.rar HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /backup.7z HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /backups.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /www.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /www.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /wwwroot.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /wwwroot.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /htdocs.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /htdocs.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /public_html.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /public_html.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /web.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /website.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /site.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /html.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /app.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /old.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /bak.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /data.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /backup.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /db.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /database.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /dump.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /db_backup.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /dbdump.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /mysql.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /mysqldump.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /data.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /users.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /www.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /site.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /sql.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /1.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /localhost.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /backup.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /db.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /dump.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /database.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /db_backup.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /mysql.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /database.sqlite HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /db.sqlite HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /backup.bak HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /db.bak HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /database.bak HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /data.bak HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /wp-content/uploads/dump.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /wp-content/uploads/backup.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /wp-content/uploads/database.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /wp-content/database.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /wp-content/mysql.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /backups/database.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /cpanel.clicfinancement.ca.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /cpanel.clicfinancement.ca.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /cpanel.clicfinancement.ca_db.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /cpanel.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /cpanel.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /cpanel.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /2026.zip HTTP/1.1" 404 5749 "-" "-" 216.73.216.203 - - [04/Sep/2026:19:33:43 +0000] "GET /robots.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.203 - - [04/Sep/2026:19:33:43 +0000] "GET /sitemap.xml HTTP/1.1" 404 3425 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 190.204.51.142 - - [04/Sep/2026:20:13:02 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0" 169.40.142.177 - - [04/Sep/2026:20:31:48 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 198.235.24.8 - - [04/Sep/2026:21:05:08 +0000] "GET / HTTP/1.1" 200 40080 "http://webmail.clicfinancement.ca/" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 20.151.10.161 - - [04/Sep/2026:21:31:02 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 401 36 "-" "-" 141.94.36.11 - - [04/Sep/2026:21:55:54 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 141.94.36.11 - - [04/Sep/2026:21:55:54 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 198.235.24.130 - - [04/Sep/2026:21:56:00 +0000] "GET / HTTP/1.1" 401 36 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 94.154.43.146 - - [04/Sep/2026:21:57:37 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 94.154.43.135 - - [04/Sep/2026:21:57:41 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 5.133.192.135 - - [04/Sep/2026:22:02:05 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 5.133.192.135 - - [04/Sep/2026:22:02:05 +0000] "GET /favicon.ico HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 54.87.57.12 - - [04/Sep/2026:22:02:41 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 54.87.57.12 - - [04/Sep/2026:22:02:43 +0000] "GET / HTTP/1.1" 200 482 "http://www.boardreader.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36" 192.104.34.34 - - [04/Sep/2026:22:22:00 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 195.178.110.67 - - [04/Sep/2026:22:29:34 +0000] "GET /.git/HEAD HTTP/1.1" 500 724 "-" "Mozilla/5.0" 20.198.81.88 - - [04/Sep/2026:22:29:40 +0000] "GET / HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:22:31:31 +0000] "GET / HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.197.17.142 - - [04/Sep/2026:22:45:51 +0000] "POST / HTTP/1.1" 500 - "https://clicfinancement.ca/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:13 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:13 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:14 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:15 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:16 +0000] "GET /.git/config HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:17 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:18 +0000] "GET /.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:19 +0000] "GET /.env.local HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:20 +0000] "GET /.env.production HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:20 +0000] "GET /.env.staging HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:21 +0000] "GET /.env.development HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:22 +0000] "GET /.env.test HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:22 +0000] "GET /.env.remote HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:23 +0000] "GET /.env.bak HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:23 +0000] "GET /.env.backup HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:24 +0000] "GET /.env.save HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:24 +0000] "GET /.env.old HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:25 +0000] "GET /.env.sample HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:25 +0000] "GET /.env.example HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:26 +0000] "GET /.env.dev HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:27 +0000] "GET /.env.prod HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:28 +0000] "GET /.env.stage HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:28 +0000] "GET /.env.ci HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:29 +0000] "GET /.env.docker HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:29 +0000] "GET /.env.live HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:30 +0000] "GET /.env.preprod HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:30 +0000] "GET /.env.uat HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:31 +0000] "GET /.env.dist HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:31 +0000] "GET /.env.swp HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:32 +0000] "GET /.env~ HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:33 +0000] "GET /.env1 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:34 +0000] "GET /.env2 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:34 +0000] "GET /.env_copy HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:35 +0000] "GET /.env.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:35 +0000] "GET /.env.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:36 +0000] "GET /.env.yaml HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:36 +0000] "GET /.env.yml HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:37 +0000] "GET /app/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:37 +0000] "GET /apps/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:38 +0000] "GET /api/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:39 +0000] "GET /web/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:39 +0000] "GET /site/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:40 +0000] "GET /public/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:40 +0000] "GET /admin/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:41 +0000] "GET /backend/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:41 +0000] "GET /server/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:41 +0000] "GET /frontend/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:42 +0000] "GET /src/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:42 +0000] "GET /core/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:43 +0000] "GET /core/app/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:43 +0000] "GET /config/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:43 +0000] "GET /private/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:44 +0000] "GET /application/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:45 +0000] "GET /bootstrap/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:45 +0000] "GET /database/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:46 +0000] "GET /storage/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:46 +0000] "GET /var/www/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:47 +0000] "GET /var/www/html/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:47 +0000] "GET /current/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:48 +0000] "GET /release/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:48 +0000] "GET /releases/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:49 +0000] "GET /shared/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:49 +0000] "GET /deploy/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:50 +0000] "GET /build/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:50 +0000] "GET /dist/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:51 +0000] "GET /public_html/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:51 +0000] "GET /htdocs/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:52 +0000] "GET /www/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:53 +0000] "GET /html/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:53 +0000] "GET /live/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:54 +0000] "GET /prod/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:54 +0000] "GET /dev/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:54 +0000] "GET /staging/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:55 +0000] "GET /opt/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:56 +0000] "GET /laravel/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:56 +0000] "GET /symfony/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:57 +0000] "GET /wordpress/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:58 +0000] "GET /wp/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:58 +0000] "GET /cms/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:59 +0000] "GET /drupal/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:59 +0000] "GET /joomla/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:00 +0000] "GET /magento/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:01 +0000] "GET /shopify/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:01 +0000] "GET /prestashop/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:02 +0000] "GET /codeigniter/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:02 +0000] "GET /cakephp/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:02 +0000] "GET /zend/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:03 +0000] "GET /yii/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:03 +0000] "GET /laravel5/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:04 +0000] "GET /v1/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:04 +0000] "GET /v2/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:05 +0000] "GET /v3/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:06 +0000] "GET /api/v1/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:07 +0000] "GET /api/v2/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:07 +0000] "GET /rest/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:08 +0000] "GET /graphql/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:08 +0000] "GET /gateway/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:09 +0000] "GET /microservice/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:09 +0000] "GET /service/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:10 +0000] "GET /api/v3/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:11 +0000] "GET /api/dev/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:11 +0000] "GET /api/staging/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:12 +0000] "GET /vendor/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:13 +0000] "GET /lib/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:13 +0000] "GET /resources/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:14 +0000] "GET /assets/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:14 +0000] "GET /uploads/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:15 +0000] "GET /internal/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:16 +0000] "GET /tools/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:16 +0000] "GET /scripts/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:17 +0000] "GET /bin/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:17 +0000] "GET /sbin/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:18 +0000] "GET /local/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:18 +0000] "GET /portal/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:19 +0000] "GET /dashboard/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:20 +0000] "GET /panel/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:20 +0000] "GET /crm/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:20 +0000] "GET /erp/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:21 +0000] "GET /shop/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:22 +0000] "GET /store/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:22 +0000] "GET /saas/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:23 +0000] "GET /client/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:23 +0000] "GET /project/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:24 +0000] "GET /admin-panel/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:25 +0000] "GET /control-panel/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:26 +0000] "GET /user-panel/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:26 +0000] "GET /node/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:27 +0000] "GET /express/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:28 +0000] "GET /next/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:29 +0000] "GET /nuxt/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:29 +0000] "GET /nest/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:30 +0000] "GET /react/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:30 +0000] "GET /vue/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:31 +0000] "GET /angular/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:31 +0000] "GET /svelte/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:32 +0000] "GET /vite/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:33 +0000] "GET /backup/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:34 +0000] "GET /backups/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:34 +0000] "GET /old/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:35 +0000] "GET /tmp/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:36 +0000] "GET /temp/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:36 +0000] "GET /lab/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:37 +0000] "GET /cronlab/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:37 +0000] "GET /cron/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:38 +0000] "GET /en/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:39 +0000] "GET /administrator/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:40 +0000] "GET /psnlink/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:40 +0000] "GET /exapi/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:41 +0000] "GET /sitemaps/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:41 +0000] "GET /.env.backup1 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:42 +0000] "GET /.env.backup2 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:43 +0000] "GET /logs/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:43 +0000] "GET /cache/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:44 +0000] "GET /mailer/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:45 +0000] "GET /mail/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:45 +0000] "GET /email/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:46 +0000] "GET /smtp/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:47 +0000] "GET /mailing/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:48 +0000] "GET /notifications/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:49 +0000] "GET /notify/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:50 +0000] "GET /sender/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:51 +0000] "GET /campaign/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:52 +0000] "GET /newsletter/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:52 +0000] "GET /ses/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:53 +0000] "GET /sendgrid/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:54 +0000] "GET /sparkpost/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:55 +0000] "GET /postmark/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:56 +0000] "GET /mailgun/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:57 +0000] "GET /mandrill/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:58 +0000] "GET /mailjet/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:59 +0000] "GET /brevo/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:00 +0000] "GET /transactional/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:01 +0000] "GET /bulk/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:02 +0000] "GET /aws/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:03 +0000] "GET /azure/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:05 +0000] "GET /gcp/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:06 +0000] "GET /cloud/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:07 +0000] "GET /infrastructure/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:07 +0000] "GET /docker/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:08 +0000] "GET /k8s/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:09 +0000] "GET /kubernetes/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:10 +0000] "GET /terraform/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:10 +0000] "GET /ansible/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:11 +0000] "GET /.git/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:12 +0000] "GET /ci/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:12 +0000] "GET /cd/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:13 +0000] "GET /jenkins/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:14 +0000] "GET /gitlab/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:14 +0000] "GET /github/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:15 +0000] "GET /actions/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:15 +0000] "GET /circleci/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:16 +0000] "GET /travis/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:16 +0000] "GET /buildkite/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:17 +0000] "GET /mysql/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:18 +0000] "GET /postgres/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:18 +0000] "GET /mongodb/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:18 +0000] "GET /redis/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:19 +0000] "GET /elasticsearch/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:19 +0000] "GET /rabbitmq/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:20 +0000] "GET /kafka/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:21 +0000] "GET /queue/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:21 +0000] "GET /worker/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:22 +0000] "GET /job/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:22 +0000] "GET /test/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:23 +0000] "GET /qa/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:24 +0000] "GET /preview/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:24 +0000] "GET /beta/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:25 +0000] "GET /uat/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:26 +0000] "GET /stage/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:26 +0000] "GET /development/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:27 +0000] "GET /production/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:28 +0000] "GET /config/app/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:28 +0000] "GET /phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:29 +0000] "GET /info.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:29 +0000] "GET /php.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:30 +0000] "GET /i.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:30 +0000] "GET /pi.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:30 +0000] "GET /pinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:31 +0000] "GET /test.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:31 +0000] "GET /phpinfo HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:32 +0000] "GET /p.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:32 +0000] "GET /debug.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:33 +0000] "GET /admin/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:33 +0000] "GET /test/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:34 +0000] "GET /dev/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:35 +0000] "GET /old/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:36 +0000] "GET /tmp/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:36 +0000] "GET /public/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:37 +0000] "GET /info HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:38 +0000] "GET /php-info.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:38 +0000] "GET /phpversion.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:39 +0000] "GET /_phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:39 +0000] "GET /old_phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:40 +0000] "GET /server-info.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:41 +0000] "GET /server-status.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:41 +0000] "GET /_profiler/phpinfo HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:42 +0000] "GET /_environment HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:42 +0000] "GET /webroot/index.php/_environment HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:43 +0000] "GET /mail/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:44 +0000] "GET /cpanel/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:44 +0000] "GET /hosting/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:45 +0000] "GET /webmail/phpinfo.php HTTP/1.1" 200 34902 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:46 +0000] "GET /smtp/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:46 +0000] "GET /phpinfo.php.bak HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:47 +0000] "GET /phpinfo.php.old HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:47 +0000] "GET /phpinfo.php~ HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:48 +0000] "GET /info.php.bak HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:49 +0000] "GET /phpinfo.php.save HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:49 +0000] "GET /staging/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:50 +0000] "GET /beta/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:50 +0000] "GET /uat/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:51 +0000] "GET /qa/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:52 +0000] "GET /preview/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:52 +0000] "GET /www/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:53 +0000] "GET /htdocs/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:53 +0000] "GET /public_html/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:53 +0000] "GET /site/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:54 +0000] "GET /docs/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:54 +0000] "GET /wp-admin/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:55 +0000] "GET /administrator/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:55 +0000] "GET /core/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:56 +0000] "GET /includes/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:56 +0000] "GET /service-account.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:56 +0000] "GET /sa.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:57 +0000] "GET /gcp-key.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:58 +0000] "GET /gcp-credentials.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:58 +0000] "GET /gcp-sa.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:59 +0000] "GET /credentials.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:59 +0000] "GET /google-credentials.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:00 +0000] "GET /google-key.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:00 +0000] "GET /.config/gcloud/application_default_credentials.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:01 +0000] "GET /application_default_credentials.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:01 +0000] "GET /key.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:02 +0000] "GET /keyfile.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:02 +0000] "GET /firebase-adminsdk.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:03 +0000] "GET /firebase-key.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:03 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:23:14:34 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 78.177.131.169 - - [04/Sep/2026:23:20:47 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36" 20.194.2.112 - - [04/Sep/2026:23:46:10 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 35.233.231.1 - - [05/Sep/2026:00:00:26 +0000] "GET / HTTP/1.1" 400 52 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:01:00:42 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:01:00:42 +0000] "GET /autoload_classmap.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:01:00:43 +0000] "GET /post.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:01:00:43 +0000] "GET /1.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:01:00:44 +0000] "GET /flower.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 216.73.216.203 - - [05/Sep/2026:01:26:02 +0000] "GET /robots.txt HTTP/1.1" 200 26 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 100.62.21.210 - - [05/Sep/2026:01:49:34 +0000] "POST / HTTP/1.1" 500 - "https://clicfinancement.ca/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 195.178.110.15 - - [05/Sep/2026:01:51:55 +0000] "GET /wp-config.php-backup HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 94.154.43.146 - - [05/Sep/2026:01:54:05 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 205.210.31.147 - - [05/Sep/2026:01:54:24 +0000] "GET / HTTP/1.1" 401 36 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 20.198.81.88 - - [05/Sep/2026:02:05:58 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:05:58 +0000] "GET /autoload_classmap.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:05:59 +0000] "GET /post.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:06:00 +0000] "GET /1.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:06:01 +0000] "GET /flower.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:06:02 +0000] "GET /admin.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:06:02 +0000] "GET /file.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:06:03 +0000] "GET /index.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:10:34 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:10:34 +0000] "GET /autoload_classmap.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:10:35 +0000] "GET /post.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:10:36 +0000] "GET /1.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:10:36 +0000] "GET /flower.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:10:37 +0000] "GET /admin.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:10:38 +0000] "GET /file.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:46 +0000] "GET / HTTP/1.1" 200 12490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:46 +0000] "GET /autoload_classmap.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:47 +0000] "GET /post.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:47 +0000] "GET /1.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:47 +0000] "GET /flower.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:47 +0000] "GET /admin.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:47 +0000] "GET /file.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:48 +0000] "GET /meta.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:48 +0000] "GET /index.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:48 +0000] "GET /abcd.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:48 +0000] "GET /about.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:48 +0000] "GET /randkeyword.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:49 +0000] "GET /goods.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:49 +0000] "GET /hehe.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:49 +0000] "GET /user.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:49 +0000] "GET /wp-2019.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:49 +0000] "GET /chosen.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:50 +0000] "GET /functions.phpA HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:50 +0000] "GET /cron.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:50 +0000] "GET /edit.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:50 +0000] "GET /gecko-new.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:50 +0000] "GET /cookie.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:51 +0000] "GET /xleet.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:51 +0000] "GET /spip.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:51 +0000] "GET /22.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:51 +0000] "GET /room.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:51 +0000] "GET /disagreed.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:52 +0000] "GET /text.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:52 +0000] "GET /alfa-rex.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:52 +0000] "GET /alfa-rex.php7 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:52 +0000] "GET /feeds.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:52 +0000] "GET /radio.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:53 +0000] "GET /dropdown.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:53 +0000] "GET /defaults.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:53 +0000] "GET /system.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:53 +0000] "GET /xmlrpc.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:53 +0000] "GET /xmlrpc.php0 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:54 +0000] "GET /colors.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:54 +0000] "GET /updates.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:54 +0000] "GET /alfa-rex1.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:54 +0000] "GET /wp-index.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:54 +0000] "GET /wp-admin.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:55 +0000] "GET /alfa.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:55 +0000] "GET /alfanew.php7 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:55 +0000] "GET /locale.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:55 +0000] "GET /wxo.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:56 +0000] "GET /colour.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:56 +0000] "GET /files.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:56 +0000] "GET /install.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:56 +0000] "GET /wp-contentt.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:56 +0000] "GET /config.php7 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:57 +0000] "GET /config.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:57 +0000] "GET /theme.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:57 +0000] "GET /block-bindings.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:57 +0000] "GET /class_api.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:57 +0000] "GET /inputs.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:58 +0000] "GET /root.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:58 +0000] "GET /menu.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:58 +0000] "GET /plugin.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:58 +0000] "GET /cloud.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:58 +0000] "GET /configs.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:59 +0000] "GET /wp-configs.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:59 +0000] "GET /update.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:59 +0000] "GET /2.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:59 +0000] "GET /input.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:59 +0000] "GET /aaa.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:19 +0000] "GET / HTTP/1.1" 200 12494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:21 +0000] "GET /autoload_classmap.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:21 +0000] "GET /post.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:21 +0000] "GET /1.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:21 +0000] "GET /flower.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:22 +0000] "GET /admin.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:22 +0000] "GET /file.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:22 +0000] "GET /meta.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:22 +0000] "GET /index.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:22 +0000] "GET /abcd.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:23 +0000] "GET /about.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:23 +0000] "GET /randkeyword.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:23 +0000] "GET /goods.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:23 +0000] "GET /hehe.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:24 +0000] "GET /user.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:24 +0000] "GET /wp-2019.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:24 +0000] "GET /chosen.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:24 +0000] "GET /functions.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:24 +0000] "GET /cron.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:25 +0000] "GET /edit.phpA HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:25 +0000] "GET /gecko-new.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:25 +0000] "GET /cookie.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:25 +0000] "GET /xleet.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:26 +0000] "GET /spip.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:26 +0000] "GET /22.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:26 +0000] "GET /room.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:26 +0000] "GET /disagreed.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:26 +0000] "GET /text.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:27 +0000] "GET /alfa-rex.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:27 +0000] "GET /alfa-rex.php7 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:27 +0000] "GET /feeds.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:27 +0000] "GET /radio.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:28 +0000] "GET /dropdown.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:28 +0000] "GET /defaults.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:28 +0000] "GET /system.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:28 +0000] "GET /xmlrpc.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:28 +0000] "GET /xmlrpc.php0 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:29 +0000] "GET /colors.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:29 +0000] "GET /updates.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:29 +0000] "GET /alfa-rex1.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:29 +0000] "GET /wp-index.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:30 +0000] "GET /wp-admin.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:30 +0000] "GET /alfa.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:30 +0000] "GET /alfanew.php7 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:30 +0000] "GET /locale.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:30 +0000] "GET /wxo.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:31 +0000] "GET /colour.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:31 +0000] "GET /files.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:31 +0000] "GET /install.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:31 +0000] "GET /wp-contentt.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:32 +0000] "GET /config.php7 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:32 +0000] "GET /config.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:32 +0000] "GET /theme.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:32 +0000] "GET /block-bindings.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:32 +0000] "GET /class_api.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:33 +0000] "GET /inputs.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:33 +0000] "GET /root.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:33 +0000] "GET /menu.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:33 +0000] "GET /plugin.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:34 +0000] "GET /cloud.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:34 +0000] "GET /configs.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:34 +0000] "GET /wp-configs.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:34 +0000] "GET /update.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:34 +0000] "GET /2.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:35 +0000] "GET /input.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:35 +0000] "GET /aaa.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:50:51 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:51:57 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /46dbr8i8qeclytcxawrCdefault.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /wp-links-opml.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /images2.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /f35.update.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /media.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /adminfuns.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /4PJcpMFsD8B.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /av.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /images.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /ops.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /BDKR28WP.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /k.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /dex.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /222.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /chosen.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /1.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /fling.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /radio.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /mac.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /simple.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /sallu.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /blacks.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /wp.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /wander.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /abcd.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /run.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /vpn.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /alfa.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /133.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /indo.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /wp-content/uploads/ HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /w.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /wp_blog_footer.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /robot.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /sss.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /gulu.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /replace.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /reviall.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /44.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /ded.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /BDKR28Wo.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /nxc.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /or.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /das.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /.well-known/nam.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /1d9e308d1fb8cd.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /cvx.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /vo8lvekd4hhiu6meydu56piCdefault.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /406.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /bypass2.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /t.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /r57.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /ffile.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /xex.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /user-new.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /flash-kiss.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /k2.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /ftde.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /wp-blog.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /CAE-2.5.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /ass.php HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:27 +0000] "GET /backup.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:28 +0000] "GET /backup.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:28 +0000] "GET /backup.tar.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:28 +0000] "GET /backup.tgz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:28 +0000] "GET /backup.rar HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:28 +0000] "GET /backup.7z HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:28 +0000] "GET /backups.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:28 +0000] "GET /www.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:28 +0000] "GET /www.tar.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:28 +0000] "GET /wwwroot.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:29 +0000] "GET /wwwroot.tar.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:29 +0000] "GET /htdocs.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:29 +0000] "GET /htdocs.tar.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:29 +0000] "GET /public_html.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:29 +0000] "GET /public_html.tar.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:29 +0000] "GET /web.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:29 +0000] "GET /website.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:29 +0000] "GET /site.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:29 +0000] "GET /html.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:30 +0000] "GET /app.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:30 +0000] "GET /old.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:30 +0000] "GET /bak.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:30 +0000] "GET /data.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:30 +0000] "GET /backup.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:30 +0000] "GET /db.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:30 +0000] "GET /database.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:30 +0000] "GET /dump.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:30 +0000] "GET /db_backup.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:31 +0000] "GET /dbdump.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:31 +0000] "GET /mysql.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:31 +0000] "GET /mysqldump.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:31 +0000] "GET /data.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:31 +0000] "GET /users.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:31 +0000] "GET /www.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:31 +0000] "GET /site.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:31 +0000] "GET /sql.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:31 +0000] "GET /1.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:32 +0000] "GET /localhost.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:32 +0000] "GET /backup.sql.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:32 +0000] "GET /db.sql.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:32 +0000] "GET /dump.sql.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:32 +0000] "GET /database.sql.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:32 +0000] "GET /db_backup.sql.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:32 +0000] "GET /mysql.sql.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:32 +0000] "GET /database.sqlite HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:32 +0000] "GET /db.sqlite HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:33 +0000] "GET /backup.bak HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:33 +0000] "GET /db.bak HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:33 +0000] "GET /database.bak HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:33 +0000] "GET /data.bak HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:33 +0000] "GET /wp-content/uploads/dump.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:33 +0000] "GET /wp-content/uploads/backup.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:33 +0000] "GET /wp-content/uploads/database.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:33 +0000] "GET /wp-content/database.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:34 +0000] "GET /wp-content/mysql.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:34 +0000] "GET /backups/database.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:34 +0000] "GET /webdisk.clicfinancement.ca.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:34 +0000] "GET /webdisk.clicfinancement.ca.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:34 +0000] "GET /webdisk.clicfinancement.ca_db.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:34 +0000] "GET /webdisk.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:34 +0000] "GET /webdisk.tar.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:34 +0000] "GET /webdisk.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:34 +0000] "GET /2026.zip HTTP/1.1" 401 36 "-" "-" 44.195.30.193 - - [05/Sep/2026:03:21:12 +0000] "POST / HTTP/1.1" 500 - "https://www.clicfinancementca.techbala.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 213.209.159.84 - - [05/Sep/2026:03:26:47 +0000] "GET /.git/config HTTP/1.1" 500 724 "-" "Mozilla/5.0 (compatible; GitFinder/1.0)" 216.73.216.203 - - [05/Sep/2026:03:40:28 +0000] "GET /robots.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.203 - - [05/Sep/2026:03:40:28 +0000] "GET /sitemap.xml HTTP/1.1" 404 3425 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"