/
var
/
log
/
apache2
/
domlogs
/
techb158
/
/var/log/apache2/domlogs/techb158
mkdir
upload
Name
Size
Mode
Actions
abdallabala.techbala.com
11995233
0640
edit
dl
rm
abdallabala.techbala.com-ssl_log
25618266
0640
edit
dl
rm
aleamaralawal.com.techbala.com
11649
0640
edit
dl
rm
aleamaralawal.com.techbala.com-ssl_log
125185
0640
edit
dl
rm
bala.techbala.ca
0
0640
edit
dl
rm
bala.techbala.ca-ssl_log
411
0640
edit
dl
rm
bala.techbala.com
0
0640
edit
dl
rm
bala.techbala.com-ssl_log
0
0640
edit
dl
rm
balacoffee.com.techbala.com
4259
0640
edit
dl
rm
balacoffee.com.techbala.com-ssl_log
77660
0640
edit
dl
rm
balacoffees.techbala.com
0
0640
edit
dl
rm
balacoffees.techbala.com-ssl_log
0
0640
edit
dl
rm
balagrouptechnologies.techbala.com
0
0640
edit
dl
rm
balagrouptechnologies.techbala.com-ssl_log
0
0640
edit
dl
rm
belady-ly.techbala.com
0
0640
edit
dl
rm
belady-ly.techbala.com-ssl_log
0
0640
edit
dl
rm
beladygroup.techbala.com
0
0640
edit
dl
rm
beladygroup.techbala.com-ssl_log
0
0640
edit
dl
rm
carlosbeauregard.techbala.com
0
0640
edit
dl
rm
carlosbeauregard.techbala.com-ssl_log
0
0640
edit
dl
rm
charismaticmovers.techbala.com
6281
0640
edit
dl
rm
charismaticmovers.techbala.com-ssl_log
762
0640
edit
dl
rm
chatmaster.techbala.com
0
0640
edit
dl
rm
chatmaster.techbala.com-ssl_log
0
0640
edit
dl
rm
christophe-lesage.techbala.com
808
0640
edit
dl
rm
christophe-lesage.techbala.com-ssl_log
0
0640
edit
dl
rm
clicfinancement.techbala.com
16358
0640
edit
dl
rm
clicfinancement.techbala.com-ssl_log
91489
0640
edit
dl
rm
clicfinancementca.techbala.com
23220
0640
edit
dl
rm
clicfinancementca.techbala.com-ssl_log
158733
0640
edit
dl
rm
convergencesoft.ca.techbala.com
29813
0640
edit
dl
rm
convergencesoft.ca.techbala.com-ssl_log
20917
0640
edit
dl
rm
convergencesoft.techbala.com
28347
0640
edit
dl
rm
convergencesoft.techbala.com-ssl_log
59776
0640
edit
dl
rm
courtiersnetelite.techbala.com
0
0640
edit
dl
rm
courtiersnetelite.techbala.com-ssl_log
0
0640
edit
dl
rm
courtiersneteliteca.techbala.com
0
0640
edit
dl
rm
courtiersneteliteca.techbala.com-ssl_log
0
0640
edit
dl
rm
dany.techbala.com
0
0640
edit
dl
rm
dany.techbala.com-ssl_log
0
0640
edit
dl
rm
dev.aleamaralawal.com
8884
0640
edit
dl
rm
dev.aleamaralawal.com-ssl_log
9660
0640
edit
dl
rm
dev.balacoffee.com
20468425
0640
edit
dl
rm
dev.balacoffee.com-ssl_log
8753087
0640
edit
dl
rm
dlcrate.techbala.com
0
0640
edit
dl
rm
dlcrate.techbala.com-ssl_log
0
0640
edit
dl
rm
dominion.techbala.com
0
0640
edit
dl
rm
dominion.techbala.com-ssl_log
0
0640
edit
dl
rm
dominionbranch.techbala.com
0
0640
edit
dl
rm
dominionbranch.techbala.com-ssl_log
0
0640
edit
dl
rm
dominionhypothecairesca.techbala.com
0
0640
edit
dl
rm
dominionhypothecairesca.techbala.com-ssl_log
0
0640
edit
dl
rm
dominionhypothecairescom.techbala.com
0
0640
edit
dl
rm
dominionhypothecairescom.techbala.com-ssl_log
0
0640
edit
dl
rm
dominionlendingbranch.techbala.com
0
0640
edit
dl
rm
dominionlendingbranch.techbala.com-ssl_log
0
0640
edit
dl
rm
equipeballaro.techbala.com
0
0640
edit
dl
rm
equipeballaro.techbala.com-ssl_log
0
0640
edit
dl
rm
equipeballaroca.techbala.com
0
0640
edit
dl
rm
equipeballaroca.techbala.com-ssl_log
0
0640
edit
dl
rm
eshop.techbala.com
0
0640
edit
dl
rm
eshop.techbala.com-ssl_log
0
0640
edit
dl
rm
ex.abdallabala.com
0
0640
edit
dl
rm
ex.abdallabala.com-ssl_log
0
0640
edit
dl
rm
ex.techbala.com
0
0640
edit
dl
rm
ex.techbala.com-ssl_log
412
0640
edit
dl
rm
exp.abdallabala.com
191468
0640
edit
dl
rm
exp.abdallabala.com-ssl_log
3391
0640
edit
dl
rm
expense.abdallabala.com
0
0640
edit
dl
rm
expense.abdallabala.com-ssl_log
455
0640
edit
dl
rm
family.techbala.com
0
0640
edit
dl
rm
family.techbala.com-ssl_log
0
0640
edit
dl
rm
financementhypotheque.com.techbala.com
0
0640
edit
dl
rm
financementhypotheque.com.techbala.com-ssl_log
0
0640
edit
dl
rm
francisgallanthypotheque.techbala.com
2581
0640
edit
dl
rm
francisgallanthypotheque.techbala.com-ssl_log
12841
0640
edit
dl
rm
frantzihypotheque.techbala.com
8490
0640
edit
dl
rm
frantzihypotheque.techbala.com-ssl_log
7450
0640
edit
dl
rm
geodominion.techbala.com
0
0640
edit
dl
rm
geodominion.techbala.com-ssl_log
0
0640
edit
dl
rm
gfelite.techbala.com
0
0640
edit
dl
rm
gfelite.techbala.com-ssl_log
0
0640
edit
dl
rm
groupetransit.techbala.com
0
0640
edit
dl
rm
groupetransit.techbala.com-ssl_log
0
0640
edit
dl
rm
hypotheque-pret.techbala.com
0
0640
edit
dl
rm
hypotheque-pret.techbala.com-ssl_log
0
0640
edit
dl
rm
hypothequecenter.techbala.com
0
0640
edit
dl
rm
hypothequecenter.techbala.com-ssl_log
0
0640
edit
dl
rm
hypothequechristinelemieux.techbala.com
2076
0640
edit
dl
rm
hypothequechristinelemieux.techbala.com-ssl_log
4216
0640
edit
dl
rm
hypothequemultilogement.techbala.com
0
0640
edit
dl
rm
hypothequemultilogement.techbala.com-ssl_log
0
0640
edit
dl
rm
hypothequephenix.techbala.com
33326
0640
edit
dl
rm
hypothequephenix.techbala.com-ssl_log
114405
0640
edit
dl
rm
hypothequepretweb.techbala.com
0
0640
edit
dl
rm
hypothequepretweb.techbala.com-ssl_log
0
0640
edit
dl
rm
hypothequesanssoucis.techbala.com
0
0640
edit
dl
rm
hypothequesanssoucis.techbala.com-ssl_log
0
0640
edit
dl
rm
hypothequetoimieux.techbala.com
8618
0640
edit
dl
rm
hypothequetoimieux.techbala.com-ssl_log
18275
0640
edit
dl
rm
ictcreations.ca.techbala.com
0
0640
edit
dl
rm
ictcreations.ca.techbala.com-ssl_log
0
0640
edit
dl
rm
ictcreations.techbala.com
0
0640
edit
dl
rm
ictcreations.techbala.com-ssl_log
0
0640
edit
dl
rm
ileadtechnologies.techbala.com
16687
0640
edit
dl
rm
ileadtechnologies.techbala.com-ssl_log
135754
0640
edit
dl
rm
ileadtechnology.com.techbala.com
24071
0640
edit
dl
rm
ileadtechnology.com.techbala.com-ssl_log
156728
0640
edit
dl
rm
immovalet.ca.techbala.com
7524006
0640
edit
dl
rm
immovalet.ca.techbala.com-ssl_log
7755666
0640
edit
dl
rm
immovalet.techbala.com
54926425
0640
edit
dl
rm
immovalet.techbala.com-ssl_log
11352549
0640
edit
dl
rm
immovaletca.techbala.com
0
0640
edit
dl
rm
immovaletca.techbala.com-ssl_log
0
0640
edit
dl
rm
l2hypotheques.com.techbala.com
129281
0640
edit
dl
rm
l2hypotheques.com.techbala.com-ssl_log
222735
0640
edit
dl
rm
landingpage.techbala.com
0
0640
edit
dl
rm
landingpage.techbala.com-ssl_log
0
0640
edit
dl
rm
lazrqlojistik.com.techbala.com
169701735
0640
edit
dl
rm
lazrqlojistik.com.techbala.com-ssl_log
4417147
0640
edit
dl
rm
loginsystem.techbala.com
0
0640
edit
dl
rm
loginsystem.techbala.com-ssl_log
0
0640
edit
dl
rm
longwaymovingexperts.com.techbala.com
0
0640
edit
dl
rm
longwaymovingexperts.com.techbala.com-ssl_log
0
0640
edit
dl
rm
marinamendeleva.techbala.com
2570
0640
edit
dl
rm
marinamendeleva.techbala.com-ssl_log
4194
0640
edit
dl
rm
masuccursale.clicfinancement.com
0
0640
edit
dl
rm
masuccursale.clicfinancement.com-ssl_log
0
0640
edit
dl
rm
masuccursale.techbala.com
0
0640
edit
dl
rm
masuccursale.techbala.com-ssl_log
0
0640
edit
dl
rm
masuccursaledominion.techbala.com
0
0640
edit
dl
rm
masuccursaledominion.techbala.com-ssl_log
0
0640
edit
dl
rm
masuccursaledominionca.techbala.com
320
0640
edit
dl
rm
masuccursaledominionca.techbala.com-ssl_log
0
0640
edit
dl
rm
matthieust-laurent.techbala.com
2463
0640
edit
dl
rm
matthieust-laurent.techbala.com-ssl_log
5787
0640
edit
dl
rm
maxautos.techbala.com
7789
0640
edit
dl
rm
maxautos.techbala.com-ssl_log
9780
0640
edit
dl
rm
metroimmobilier.techbala.com
0
0640
edit
dl
rm
metroimmobilier.techbala.com-ssl_log
0
0640
edit
dl
rm
metroimmobilierca.techbala.com
0
0640
edit
dl
rm
metroimmobilierca.techbala.com-ssl_log
0
0640
edit
dl
rm
monphenix.techbala.com
57934824
0640
edit
dl
rm
monphenix.techbala.com-ssl_log
172017741
0640
edit
dl
rm
monphenixcs.techbala.com
194571843
0640
edit
dl
rm
monphenixcs.techbala.com-ssl_log
33930816
0640
edit
dl
rm
multilogementsclub.techbala.com
0
0640
edit
dl
rm
multilogementsclub.techbala.com-ssl_log
0
0640
edit
dl
rm
my.techbala.com
264479
0640
edit
dl
rm
my.techbala.com-ssl_log
192717
0640
edit
dl
rm
mydoiniontest.techbala.com
0
0640
edit
dl
rm
mydoiniontest.techbala.com-ssl_log
0
0640
edit
dl
rm
mydominionbranch.techbala.com
0
0640
edit
dl
rm
mydominionbranch.techbala.com-ssl_log
0
0640
edit
dl
rm
mydominionbranchca.techbala.com
0
0640
edit
dl
rm
mydominionbranchca.techbala.com-ssl_log
0
0640
edit
dl
rm
myrate.techbala.com
0
0640
edit
dl
rm
myrate.techbala.com-ssl_log
0
0640
edit
dl
rm
myratebid.techbala.com
4889
0640
edit
dl
rm
myratebid.techbala.com-ssl_log
252794
0640
edit
dl
rm
myreport.techbala.com
0
0640
edit
dl
rm
myreport.techbala.com-ssl_log
0
0640
edit
dl
rm
mytest.techbala.com
0
0640
edit
dl
rm
mytest.techbala.com-ssl_log
0
0640
edit
dl
rm
mytradingreport.techbala.com
0
0640
edit
dl
rm
mytradingreport.techbala.com-ssl_log
0
0640
edit
dl
rm
myweb.techbala.com
0
0640
edit
dl
rm
myweb.techbala.com-ssl_log
0
0640
edit
dl
rm
n8n.abdallabala.com
0
0640
edit
dl
rm
n8n.abdallabala.com-ssl_log
0
0640
edit
dl
rm
n8n.ileadtechnology.com
218
0640
edit
dl
rm
n8n.ileadtechnology.com-ssl_log
960
0640
edit
dl
rm
nathalielegerhypotheque.techbala.com
2225
0640
edit
dl
rm
nathalielegerhypotheque.techbala.com-ssl_log
15562
0640
edit
dl
rm
newlocation.techbala.com
0
0640
edit
dl
rm
newlocation.techbala.com-ssl_log
0
0640
edit
dl
rm
newmap.techbala.com
0
0640
edit
dl
rm
newmap.techbala.com-ssl_log
0
0640
edit
dl
rm
newmyratebid.techbala.com
0
0640
edit
dl
rm
newmyratebid.techbala.com-ssl_log
0
0640
edit
dl
rm
on-time-movers.com.techbala.com
14779758
0640
edit
dl
rm
on-time-movers.com.techbala.com-ssl_log
2765015
0640
edit
dl
rm
on-time-movers.techbala.com
0
0640
edit
dl
rm
on-time-movers.techbala.com-ssl_log
0
0640
edit
dl
rm
pierredewolffinance.techbala.com
0
0640
edit
dl
rm
pierredewolffinance.techbala.com-ssl_log
0
0640
edit
dl
rm
placechurchill.techbala.com
0
0640
edit
dl
rm
placechurchill.techbala.com-ssl_log
0
0640
edit
dl
rm
placechurchillca.techbala.com
0
0640
edit
dl
rm
placechurchillca.techbala.com-ssl_log
0
0640
edit
dl
rm
pneus-parfait.techbala.com
0
0640
edit
dl
rm
pneus-parfait.techbala.com-ssl_log
0
0640
edit
dl
rm
pneusparfait.com.techbala.com
29592
0640
edit
dl
rm
pneusparfait.com.techbala.com-ssl_log
2994
0640
edit
dl
rm
polimedica-tr.techbala.com
0
0640
edit
dl
rm
polimedica-tr.techbala.com-ssl_log
0
0640
edit
dl
rm
pret-hypothecaire-laval.com.techbala.com
0
0640
edit
dl
rm
pret-hypothecaire-laval.com.techbala.com-ssl_log
0
0640
edit
dl
rm
pret-hypothecaire-montreal.com.techbala.com
0
0640
edit
dl
rm
pret-hypothecaire-montreal.com.techbala.com-ssl_log
0
0640
edit
dl
rm
prets-hypotheque-dominion.techbala.com
0
0640
edit
dl
rm
prets-hypotheque-dominion.techbala.com-ssl_log
0
0640
edit
dl
rm
prets-hypothequefrancineperrier-ca.techbala.com
0
0640
edit
dl
rm
prets-hypothequefrancineperrier-ca.techbala.com-ssl_log
0
0640
edit
dl
rm
prets-hypothequefrancineperrier.techbala.com
0
0640
edit
dl
rm
prets-hypothequefrancineperrier.techbala.com-ssl_log
0
0640
edit
dl
rm
prets-hypotheques-quebec.com.techbala.com
0
0640
edit
dl
rm
prets-hypotheques-quebec.com.techbala.com-ssl_log
0
0640
edit
dl
rm
pretshypothequecom.techbala.com
0
0640
edit
dl
rm
pretshypothequecom.techbala.com-ssl_log
0
0640
edit
dl
rm
primomovers.techbala.com
11211519
0640
edit
dl
rm
primomovers.techbala.com-ssl_log
154500
0640
edit
dl
rm
primomoversca.techbala.com
36785
0640
edit
dl
rm
primomoversca.techbala.com-ssl_log
697889
0640
edit
dl
rm
report.techbala.com
0
0640
edit
dl
rm
report.techbala.com-ssl_log
0
0640
edit
dl
rm
secondlend.techbala.com
0
0640
edit
dl
rm
secondlend.techbala.com-ssl_log
0
0640
edit
dl
rm
sharing.techbala.com
0
0640
edit
dl
rm
sharing.techbala.com-ssl_log
0
0640
edit
dl
rm
skinny-movers.techbala.com
0
0640
edit
dl
rm
skinny-movers.techbala.com-ssl_log
0
0640
edit
dl
rm
solutionshypotheque.techbala.com
36812
0640
edit
dl
rm
solutionshypotheque.techbala.com-ssl_log
59539
0640
edit
dl
rm
ssl.techbala.com
0
0640
edit
dl
rm
ssl.techbala.com-ssl_log
0
0640
edit
dl
rm
subroot.techbala.com
0
0640
edit
dl
rm
subroot.techbala.com-ssl_log
0
0640
edit
dl
rm
sum.myreport.techbala.com
0
0640
edit
dl
rm
sum.myreport.techbala.com-ssl_log
0
0640
edit
dl
rm
sum.techbala.com
0
0640
edit
dl
rm
sum.techbala.com-ssl_log
158
0640
edit
dl
rm
sumtest.techbala.com
0
0640
edit
dl
rm
sumtest.techbala.com-ssl_log
0
0640
edit
dl
rm
sumtradingreports.techbala.com
0
0640
edit
dl
rm
sumtradingreports.techbala.com-ssl_log
0
0640
edit
dl
rm
techbala.ca.techbala.com
181759391
0640
edit
dl
rm
techbala.ca.techbala.com-ssl_log
1641918
0640
edit
dl
rm
techbala.com
902262
0640
edit
dl
rm
techbala.com-ssl_log
50939728
0640
edit
dl
rm
techbala.techbala.com
7913
0640
edit
dl
rm
techbala.techbala.com-ssl_log
22589
0640
edit
dl
rm
test.techbala.com
0
0640
edit
dl
rm
test.techbala.com-ssl_log
414
0640
edit
dl
rm
testbala.techbala.com
0
0640
edit
dl
rm
testbala.techbala.com-ssl_log
0
0640
edit
dl
rm
trend.techbala.com
0
0640
edit
dl
rm
trend.techbala.com-ssl_log
0
0640
edit
dl
rm
trendlyall.techbala.com
0
0640
edit
dl
rm
trendlyall.techbala.com-ssl_log
0
0640
edit
dl
rm
unehypotheque.techbala.com
0
0640
edit
dl
rm
unehypotheque.techbala.com-ssl_log
0
0640
edit
dl
rm
upload.abdallabala.com
0
0640
edit
dl
rm
upload.abdallabala.com-ssl_log
0
0640
edit
dl
rm
uploadmetro.techbala.com
0
0640
edit
dl
rm
uploadmetro.techbala.com-ssl_log
0
0640
edit
dl
rm
valet.immovalet.com
0
0640
edit
dl
rm
valet.immovalet.com-ssl_log
0
0640
edit
dl
rm
valet.techbala.com
0
0640
edit
dl
rm
valet.techbala.com-ssl_log
0
0640
edit
dl
rm
valetm.techbala.com
0
0640
edit
dl
rm
valetm.techbala.com-ssl_log
0
0640
edit
dl
rm
votresuccursale.ca.techbala.com
0
0640
edit
dl
rm
votresuccursale.ca.techbala.com-ssl_log
0
0640
edit
dl
rm
votresuccursale.techbala.com
0
0640
edit
dl
rm
votresuccursale.techbala.com-ssl_log
0
0640
edit
dl
rm
votresuccursalehypothecaireca.techbala.com
0
0640
edit
dl
rm
votresuccursalehypothecaireca.techbala.com-ssl_log
0
0640
edit
dl
rm
votresuccursalehypothecairecom.techbala.com
0
0640
edit
dl
rm
votresuccursalehypothecairecom.techbala.com-ssl_log
0
0640
edit
dl
rm
wafertraining.techbala.com
0
0640
edit
dl
rm
wafertraining.techbala.com-ssl_log
0
0640
edit
dl
rm
web.techbala.com
0
0640
edit
dl
rm
web.techbala.com-ssl_log
413
0640
edit
dl
rm
workloadmatch.techbala.com
12479
0640
edit
dl
rm
workloadmatch.techbala.com-ssl_log
280029
0640
edit
dl
rm
_wildcard_.techbala.com
202481
0640
edit
dl
rm
_wildcard_.techbala.com-ssl_log
1411133
0640
edit
dl
rm
Edit:
/var/log/apache2/domlogs/techb158/clicfinancementca.techbala.com-ssl_log
(158733B)
104.238.222.26 - - [04/Sep/2026:12:09:20 +0000] "GET /wp-login.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 104.238.222.26 - - [04/Sep/2026:12:09:22 +0000] "GET /wp-admin/ HTTP/1.1" 500 724 "https://wordpress.org/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.246.253.24 - - [04/Sep/2026:12:41:17 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 44.195.30.193 - - [04/Sep/2026:13:04:19 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 216.73.216.203 - - [04/Sep/2026:13:04:42 +0000] "GET /robots.txt HTTP/1.1" 200 26 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 34.34.146.77 - - [04/Sep/2026:13:05:51 +0000] "GET / HTTP/1.1" 200 39880 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.34.146.77 - - [04/Sep/2026:13:07:30 +0000] "GET /unprotected/json-minified.js HTTP/1.1" 200 1562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.34.146.77 - - [04/Sep/2026:13:07:30 +0000] "GET /unprotected/json-minified.js.map HTTP/1.1" 500 796 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 161.115.234.177 - - [04/Sep/2026:13:11:10 +0000] "GET / HTTP/1.1" 200 482 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 Edg/99.0.1150.30" 121.91.86.77 - - [04/Sep/2026:13:15:39 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 121.91.86.77 - - [04/Sep/2026:13:15:40 +0000] "GET /ads.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 205.210.31.214 - - [04/Sep/2026:13:18:10 +0000] "GET / HTTP/1.1" 200 40068 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.prod HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.local HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /_ignition/health-check HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.backup HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.save HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /wp-config.php.bak HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.example HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /wp-config.php.swp HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /env HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.old HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /storage/logs/laravel.log HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.production HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /actuator/configprops HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /crusader-404-probe HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /actuator/env HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.dev HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.bak HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /wp-config.php~ HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.production HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.save HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.local HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.old HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.dev HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.example HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.bak HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /wp-config.php~ HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /storage/logs/laravel.log HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /actuator/configprops HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /_ignition/health-check HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /wp-config.php.swp HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.prod HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /actuator/env HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /crusader-404-probe HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /env HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.backup HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /wp-config.php.bak HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 54.234.120.76 - - [04/Sep/2026:13:52:30 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 18.159.96.7 - - [04/Sep/2026:13:53:42 +0000] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; DefaultsExposed/1.0; +https://defaults.exposed/headers)" 20.151.10.161 - - [04/Sep/2026:13:56:26 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:26 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:26 +0000] "GET /ba.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:26 +0000] "GET /great.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:26 +0000] "GET /dyt8mjxc3yofbkoriukvgjaCdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:26 +0000] "GET /robots.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /sky.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /k.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /w.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /FWAZ.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /blurbs.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /ccc.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /images.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /alls.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /red.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /admin.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /file52.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /geck.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /biufile.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /dejavu.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /aaf.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /h02ugyh.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /155.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /ops.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /mac.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /makeasmtp.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /pucci.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /puc.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /8.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /1.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /admin.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /edit.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /inputs.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /av.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /classwithtostring.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /adminfuns.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /ms-edit.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /222.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /BDKR28WP.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /wp.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /abcd.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /simple.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /chosen.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /als.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /file65.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /admin.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /bless.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /f35.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /aaa.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /gecko.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /xiugai.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /adminner.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /inx.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /11.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /File.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /a3ampzmbipnkpxeqhqpsanCdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /4PJcpMFsD8B.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /i99z7zzbwtpteujvv6s8hiCdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /gwaih1gfzp5vuwr04Cdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /1wvekeybd9it2di2vyipgr6Cdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /media.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /inso.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /shiny.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /403dd.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /baba.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /site.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /cabs.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /insc.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /file.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /dex.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /key.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /kir.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /nofile.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /fling.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /btyuio.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /or.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /mails.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /sm.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /araso.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /a.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /sb.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-content/index.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-includes/ID3/about.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-admin/css/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-includes/blocks/details/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-includes/blocks/audio/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-temp.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-admin/js/index.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-includes/Requests/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-content/admin.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /av.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-goods.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-includes/js/jquery/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /cgi-bin/index.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-includes/l10n/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-manager.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /cgi-bin/admin.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-content/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp-includes/block-bindings/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp-includes/assets/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp-admin/network/plugins.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp-admin/maint/index.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /qazwsx.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /cae2.2.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /b8.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /xs.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp-content/uploads/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp_blog_footer.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /billzgs.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /CAE-2.5.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /0.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /v4on3fxtoo5z5cq0yCdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /8xmlr9ommwdy3ro8dCdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /fms.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /0day.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /das.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /wss.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /fw.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /waa.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /By4mzbsowFX.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /selrfiem.php HTTP/1.1" 401 36 "-" "-" 87.58.197.202 - - [04/Sep/2026:14:13:49 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 80.94.92.175 - - [04/Sep/2026:14:16:28 +0000] "GET /.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 103.160.172.244 - - [04/Sep/2026:14:48:26 +0000] "POST /xmlrpc.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.0.0 Safari/537.36" 3.18.186.238 - - [04/Sep/2026:14:49:44 +0000] "GET / HTTP/1.1" 200 482 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 198.235.24.133 - - [04/Sep/2026:14:57:53 +0000] "GET / HTTP/1.1" 401 36 "http://cpcontacts.clicfinancement.ca/" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 87.58.197.202 - - [04/Sep/2026:15:06:54 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.dev HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.example HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.bak HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.prod HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.local HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /actuator/env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /crusader-404-probe HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /wp-config.php.swp HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.backup HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.production HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /actuator/configprops HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.old HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.save HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /storage/logs/laravel.log HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /_ignition/health-check HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /wp-config.php~ HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /wp-config.php.bak HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:54 +0000] "GET /.env. HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:54 +0000] "GET / HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:54 +0000] "GET /.ENV HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:54 +0000] "GET /.env/ HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:54 +0000] "GET //.env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:54 +0000] "GET /%2eenv HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:54 +0000] "GET /.env;.png HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.backup HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /wp-config.php.swp HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.production HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.bak HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /wp-config.php~ HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /_ignition/health-check HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /wp-config.php.bak HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.example HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.prod HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.old HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /storage/logs/laravel.log HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.local HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /crusader-404-probe HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.save HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.dev HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /actuator/env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /actuator/configprops HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:32 +0000] "GET /.env/ HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:32 +0000] "GET / HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:32 +0000] "GET //.env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:32 +0000] "GET /%2eenv HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:32 +0000] "GET /.ENV HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:32 +0000] "GET /.env. HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:32 +0000] "GET /.env;.png HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 104.152.52.120 - - [04/Sep/2026:15:23:31 +0000] "GET / HTTP/1.1" 200 482 "-" "curl/7.61.1" 104.152.52.120 - - [04/Sep/2026:15:23:31 +0000] "GET /favicon.ico HTTP/1.1" 500 724 "-" "curl/7.61.1" 216.73.216.203 - - [04/Sep/2026:15:38:22 +0000] "GET /robots.txt HTTP/1.1" 200 26 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /public/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /htdocs/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /src/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /www/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /html/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /wordpress/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /backend/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /api/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /app/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /var/www/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /site/.git/config HTTP/1.1" 502 5318 "-" "crusader-worker/1.0" 52.90.150.115 - - [04/Sep/2026:15:52:50 +0000] "POST / HTTP/1.1" 500 - "https://clicfinancementca.techbala.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 85.208.96.207 - - [04/Sep/2026:15:58:36 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)" 104.208.72.93 - - [04/Sep/2026:15:58:41 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.170.167.18 - - [04/Sep/2026:15:58:45 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (compatible; BacklinksExtendedBot)" 20.214.149.209 - - [04/Sep/2026:16:00:39 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 44.195.30.193 - - [04/Sep/2026:16:21:11 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:43 +0000] "GET / HTTP/1.1" 200 12490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:45 +0000] "GET /autoload_classmap.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:45 +0000] "GET /post.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:45 +0000] "GET /1.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:45 +0000] "GET /flower.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:45 +0000] "GET /admin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:46 +0000] "GET /file.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:46 +0000] "GET /meta.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:46 +0000] "GET /index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:46 +0000] "GET /abcd.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:47 +0000] "GET /about.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:47 +0000] "GET /randkeyword.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:47 +0000] "GET /goods.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:47 +0000] "GET /hehe.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:47 +0000] "GET /user.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:48 +0000] "GET /wp-2019.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:48 +0000] "GET /chosen.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:48 +0000] "GET /functions.phpA HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:48 +0000] "GET /cron.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:48 +0000] "GET /edit.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:49 +0000] "GET /gecko-new.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:49 +0000] "GET /cookie.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:49 +0000] "GET /xleet.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:49 +0000] "GET /spip.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:50 +0000] "GET /22.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:50 +0000] "GET /room.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:50 +0000] "GET /disagreed.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:50 +0000] "GET /text.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:50 +0000] "GET /alfa-rex.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:51 +0000] "GET /alfa-rex.php7 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:51 +0000] "GET /feeds.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:51 +0000] "GET /radio.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:51 +0000] "GET /dropdown.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:52 +0000] "GET /defaults.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:52 +0000] "GET /system.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:52 +0000] "GET /xmlrpc.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:52 +0000] "GET /xmlrpc.php0 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:52 +0000] "GET /colors.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:53 +0000] "GET /updates.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:53 +0000] "GET /alfa-rex1.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:53 +0000] "GET /wp-index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:53 +0000] "GET /wp-admin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:53 +0000] "GET /alfa.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:54 +0000] "GET /alfanew.php7 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:54 +0000] "GET /locale.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:54 +0000] "GET /wxo.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:54 +0000] "GET /colour.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:55 +0000] "GET /files.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:55 +0000] "GET /install.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:55 +0000] "GET /wp-contentt.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:55 +0000] "GET /config.php7 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:55 +0000] "GET /config.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:56 +0000] "GET /theme.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:56 +0000] "GET /block-bindings.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:56 +0000] "GET /class_api.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:56 +0000] "GET /inputs.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:57 +0000] "GET /root.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:57 +0000] "GET /menu.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:57 +0000] "GET /plugin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:57 +0000] "GET /cloud.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:57 +0000] "GET /configs.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:58 +0000] "GET /wp-configs.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:58 +0000] "GET /update.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:58 +0000] "GET /2.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:58 +0000] "GET /input.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:58 +0000] "GET /aaa.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 54.234.120.76 - - [04/Sep/2026:17:08:48 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 74.7.230.55 - - [04/Sep/2026:17:10:48 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.228.20 - - [04/Sep/2026:17:10:48 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.241.141 - - [04/Sep/2026:17:10:48 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.244.1 - - [04/Sep/2026:17:10:48 +0000] "GET /robots.txt HTTP/1.1" 401 53 "http://cpcalendars.clicfinancement.ca/robots.txt" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.230.24 - - [04/Sep/2026:17:10:48 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.230.28 - - [04/Sep/2026:17:10:48 +0000] "GET /robots.txt HTTP/1.1" 401 53 "http://cpcontacts.clicfinancement.ca/robots.txt" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.228.32 - - [04/Sep/2026:17:10:49 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.244.18 - - [04/Sep/2026:17:10:49 +0000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "http://autodiscover.clicfinancement.ca/robots.txt" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.244.1 - - [04/Sep/2026:17:10:51 +0000] "GET /robots.txt HTTP/1.1" 200 26 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.230.28 - - [04/Sep/2026:17:10:51 +0000] "GET /robots.txt HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.244.1 - - [04/Sep/2026:17:10:51 +0000] "GET /robots.txt HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.227.9 - - [04/Sep/2026:17:10:51 +0000] "GET /wp-admin/setup-config.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:10:51 +0000] "GET /wp-admin/class.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.242.36 - - [04/Sep/2026:17:10:51 +0000] "GET /wp-includes/css/buttons.css HTTP/1.1" 401 53 "http://cpcontacts.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.241.13 - - [04/Sep/2026:17:10:51 +0000] "GET /media/system/js/core.js HTTP/1.1" 401 53 "http://cpcalendars.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.244.18 - - [04/Sep/2026:17:10:51 +0000] "GET /robots.txt HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.243.193 - - [04/Sep/2026:17:10:54 +0000] "GET /buy.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.242.36 - - [04/Sep/2026:17:10:54 +0000] "GET /media/system/js/core.js HTTP/1.1" 401 53 "http://cpcontacts.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.241.13 - - [04/Sep/2026:17:10:54 +0000] "GET /wp-includes/css/buttons.css HTTP/1.1" 401 53 "http://cpcalendars.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:10:54 +0000] "GET /wp-admin/update.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:10:57 +0000] "GET /bolt.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:10:58 +0000] "GET /wp-admin/themes.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:00 +0000] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:03 +0000] "GET /ab.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:11:05 +0000] "GET /wp-admin/ HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:06 +0000] "GET /000.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:09 +0000] "GET /wp-admin/css/colors/lock.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:12 +0000] "GET /wp-admin/wp-config-backup.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:15 +0000] "GET /wp-admin/maint/src/xth/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:11:15 +0000] "GET /wp-admin/update-core.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:18 +0000] "GET /wp-admin/images/html-api/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:21 +0000] "GET /wp-blog-header.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:24 +0000] "GET /wp-content/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:27 +0000] "GET /wp-content.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:30 +0000] "GET /wp-admin/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:11:30 +0000] "GET /wp-login.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:33 +0000] "GET /2.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:36 +0000] "GET /wp-admin.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:39 +0000] "GET /admin.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:41 +0000] "GET /system_core.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:45 +0000] "GET /system_log.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:48 +0000] "GET /ioxi-o.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:11:50 +0000] "GET /wp-admin/theme-install.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:50 +0000] "GET /aboutc.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:53 +0000] "GET /private/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:57 +0000] "GET /session_init.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:00 +0000] "GET /upload/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:03 +0000] "GET /images/ HTTP/1.1" 200 12490 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:05 +0000] "GET /admin/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:08 +0000] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 401 12503 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:12:10 +0000] "GET /wp-admin/css/install.min.css HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:10 +0000] "GET /themes.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:13 +0000] "GET /chosen.php HTTP/1.1" 401 12513 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:15 +0000] "GET /inputs.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:18 +0000] "GET /simple.php HTTP/1.1" 401 12509 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:20 +0000] "GET /system.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:23 +0000] "GET /item.php HTTP/1.1" 401 12513 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:25 +0000] "GET /wa/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:27 +0000] "GET /class.api.php HTTP/1.1" 401 12500 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:30 +0000] "GET /.well-known/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:12:30 +0000] "GET /wp-admin/install.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:32 +0000] "GET /worksec.php HTTP/1.1" 401 12508 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:34 +0000] "GET /adminfuns.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:37 +0000] "GET /bless.php HTTP/1.1" 401 12503 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:39 +0000] "GET /click.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:42 +0000] "GET /goods.php HTTP/1.1" 401 12511 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:44 +0000] "GET /shell.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:46 +0000] "GET /options.php HTTP/1.1" 401 12513 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:49 +0000] "GET /a.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:12:50 +0000] "GET /wp-admin/about.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:51 +0000] "GET /t.php HTTP/1.1" 401 12496 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:54 +0000] "GET /m.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:56 +0000] "GET /rip.php HTTP/1.1" 401 12509 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:59 +0000] "GET /num.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:01 +0000] "GET /new.php HTTP/1.1" 401 12501 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:03 +0000] "GET /mah.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:06 +0000] "GET /log.php HTTP/1.1" 401 12510 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:08 +0000] "GET /mini.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:10 +0000] "GET /ahax.php HTTP/1.1" 401 12510 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:13 +0000] "GET /abcd.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:15 +0000] "GET /file.php HTTP/1.1" 401 12501 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:18 +0000] "GET /edit.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:20 +0000] "GET /root.php HTTP/1.1" 401 12496 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:22 +0000] "GET /1.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:25 +0000] "GET /wp-config-sample.php HTTP/1.1" 401 12511 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:27 +0000] "GET /database.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:29 +0000] "GET /classwithtostring.php HTTP/1.1" 401 12500 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:32 +0000] "GET /files.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:34 +0000] "GET /radio.php HTTP/1.1" 401 12510 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:37 +0000] "GET /about.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:39 +0000] "GET /first.php HTTP/1.1" 401 12511 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:42 +0000] "GET /file-mancvgertdxz.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:44 +0000] "GET /install.php HTTP/1.1" 401 12504 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:46 +0000] "GET /app.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:49 +0000] "GET /we.php HTTP/1.1" 401 12512 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:51 +0000] "GET /fm.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:54 +0000] "GET /vx.php HTTP/1.1" 401 12501 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:56 +0000] "GET /as.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:58 +0000] "GET /user.php HTTP/1.1" 401 12500 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:14:01 +0000] "GET /wp-admin/widgets-form-blocks-interface.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:14:03 +0000] "GET /scanner3.php HTTP/1.1" 401 12511 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:14:06 +0000] "GET /aa.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:14:08 +0000] "GET /filemanager.php HTTP/1.1" 401 12509 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 20.198.7.31 - - [04/Sep/2026:17:19:05 +0000] "GET / HTTP/1.1" 200 12489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:05 +0000] "GET /autoload_classmap.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:06 +0000] "GET /post.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:06 +0000] "GET /1.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:06 +0000] "GET /flower.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:06 +0000] "GET /admin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:06 +0000] "GET /file.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:07 +0000] "GET /meta.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:07 +0000] "GET /index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:07 +0000] "GET /abcd.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:07 +0000] "GET /about.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:07 +0000] "GET /randkeyword.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:08 +0000] "GET /goods.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:08 +0000] "GET /hehe.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:08 +0000] "GET /user.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:08 +0000] "GET /wp-2019.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:08 +0000] "GET /chosen.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:09 +0000] "GET /functions.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:09 +0000] "GET /cron.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:09 +0000] "GET /edit.phpA HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:09 +0000] "GET /gecko-new.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:09 +0000] "GET /cookie.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:10 +0000] "GET /xleet.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:10 +0000] "GET /spip.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:10 +0000] "GET /22.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:10 +0000] "GET /room.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:10 +0000] "GET /disagreed.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:11 +0000] "GET /text.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:11 +0000] "GET /alfa-rex.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:11 +0000] "GET /alfa-rex.php7 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:11 +0000] "GET /feeds.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:11 +0000] "GET /radio.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:12 +0000] "GET /dropdown.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:12 +0000] "GET /defaults.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:12 +0000] "GET /system.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:12 +0000] "GET /xmlrpc.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:13 +0000] "GET /xmlrpc.php0 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:13 +0000] "GET /colors.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:13 +0000] "GET /updates.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:13 +0000] "GET /alfa-rex1.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:13 +0000] "GET /wp-index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:14 +0000] "GET /wp-admin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:14 +0000] "GET /alfa.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:14 +0000] "GET /alfanew.php7 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:14 +0000] "GET /locale.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:14 +0000] "GET /wxo.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:15 +0000] "GET /colour.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:15 +0000] "GET /files.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:15 +0000] "GET /install.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:15 +0000] "GET /wp-contentt.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:15 +0000] "GET /config.php7 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:16 +0000] "GET /config.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:16 +0000] "GET /theme.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:16 +0000] "GET /block-bindings.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:16 +0000] "GET /class_api.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:16 +0000] "GET /inputs.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:17 +0000] "GET /root.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:17 +0000] "GET /menu.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:17 +0000] "GET /plugin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:17 +0000] "GET /cloud.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:17 +0000] "GET /configs.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:18 +0000] "GET /wp-configs.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:18 +0000] "GET /update.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:18 +0000] "GET /2.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:18 +0000] "GET /input.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:18 +0000] "GET /aaa.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.178.110.66 - - [04/Sep/2026:17:21:25 +0000] "GET /api/session/properties HTTP/1.1" 500 724 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" 216.73.216.203 - - [04/Sep/2026:17:35:41 +0000] "GET /robots.txt HTTP/1.1" 200 26 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 51.15.215.70 - - [04/Sep/2026:18:25:39 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:18:35:32 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:18:35:32 +0000] "GET /autoload_classmap.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:18:35:33 +0000] "GET /post.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:18:35:33 +0000] "GET /1.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:18:35:34 +0000] "GET /flower.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:18:35:35 +0000] "GET /admin.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:18:35:36 +0000] "GET /file.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:51 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:51 +0000] "GET /autoload_classmap.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:52 +0000] "GET /post.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:53 +0000] "GET /1.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:53 +0000] "GET /flower.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:54 +0000] "GET /admin.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:55 +0000] "GET /file.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:56 +0000] "GET /meta.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:57 +0000] "GET /index.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:57 +0000] "GET /abcd.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:58 +0000] "GET /about.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:59 +0000] "GET /randkeyword.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:00 +0000] "GET /goods.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:00 +0000] "GET /hehe.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:01 +0000] "GET /user.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:02 +0000] "GET /wp-2019.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:03 +0000] "GET /chosen.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:04 +0000] "GET /functions.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:04 +0000] "GET /cron.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:05 +0000] "GET /edit.phpA HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:06 +0000] "GET /gecko-new.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:07 +0000] "GET /cookie.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:07 +0000] "GET /xleet.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:08 +0000] "GET /spip.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:09 +0000] "GET /22.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:10 +0000] "GET /room.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:11 +0000] "GET /disagreed.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:11 +0000] "GET /text.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:12 +0000] "GET /alfa-rex.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:13 +0000] "GET /alfa-rex.php7 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:14 +0000] "GET /feeds.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:14 +0000] "GET /radio.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:15 +0000] "GET /dropdown.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:16 +0000] "GET /defaults.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:17 +0000] "GET /system.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:18 +0000] "GET /xmlrpc.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:18 +0000] "GET /xmlrpc.php0 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:19 +0000] "GET /colors.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:20 +0000] "GET /updates.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:21 +0000] "GET /alfa-rex1.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:21 +0000] "GET /wp-index.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:22 +0000] "GET /wp-admin.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:23 +0000] "GET /alfa.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:24 +0000] "GET /alfanew.php7 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:24 +0000] "GET /locale.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:25 +0000] "GET /wxo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:26 +0000] "GET /colour.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:27 +0000] "GET /files.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:28 +0000] "GET /install.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:29 +0000] "GET /config.php7 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:29 +0000] "GET /config.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:30 +0000] "GET /theme.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:31 +0000] "GET /block-bindings.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:32 +0000] "GET /class_api.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:32 +0000] "GET /inputs.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:33 +0000] "GET /root.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:34 +0000] "GET /menu.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:35 +0000] "GET /plugin.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.243.46.220 - - [04/Sep/2026:18:50:00 +0000] "GET /.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /backup.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /backup.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /backup.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /backup.tgz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /backup.rar HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /backup.7z HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /backups.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /www.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /www.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /wwwroot.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /wwwroot.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /htdocs.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /htdocs.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /public_html.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /public_html.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /web.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /website.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /site.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /html.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /app.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /old.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /bak.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /data.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /backup.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /db.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /database.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /dump.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /db_backup.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /dbdump.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /mysql.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /mysqldump.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /data.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /users.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /www.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /site.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /sql.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /1.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /localhost.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /backup.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /db.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /dump.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /database.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /db_backup.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /mysql.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /database.sqlite HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /db.sqlite HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /backup.bak HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /db.bak HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /database.bak HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /data.bak HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /wp-content/uploads/dump.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /wp-content/uploads/backup.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /wp-content/uploads/database.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /wp-content/database.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /wp-content/mysql.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /backups/database.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /cpanel.clicfinancement.ca.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /cpanel.clicfinancement.ca.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /cpanel.clicfinancement.ca_db.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /cpanel.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /cpanel.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /cpanel.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /2026.zip HTTP/1.1" 404 5749 "-" "-" 216.73.216.203 - - [04/Sep/2026:19:33:43 +0000] "GET /robots.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.203 - - [04/Sep/2026:19:33:43 +0000] "GET /sitemap.xml HTTP/1.1" 404 3425 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 190.204.51.142 - - [04/Sep/2026:20:13:02 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0" 169.40.142.177 - - [04/Sep/2026:20:31:48 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 198.235.24.8 - - [04/Sep/2026:21:05:08 +0000] "GET / HTTP/1.1" 200 40080 "http://webmail.clicfinancement.ca/" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 20.151.10.161 - - [04/Sep/2026:21:31:02 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 401 36 "-" "-" 141.94.36.11 - - [04/Sep/2026:21:55:54 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 141.94.36.11 - - [04/Sep/2026:21:55:54 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 198.235.24.130 - - [04/Sep/2026:21:56:00 +0000] "GET / HTTP/1.1" 401 36 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 94.154.43.146 - - [04/Sep/2026:21:57:37 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 94.154.43.135 - - [04/Sep/2026:21:57:41 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 5.133.192.135 - - [04/Sep/2026:22:02:05 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 5.133.192.135 - - [04/Sep/2026:22:02:05 +0000] "GET /favicon.ico HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 54.87.57.12 - - [04/Sep/2026:22:02:41 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 54.87.57.12 - - [04/Sep/2026:22:02:43 +0000] "GET / HTTP/1.1" 200 482 "http://www.boardreader.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36" 192.104.34.34 - - [04/Sep/2026:22:22:00 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 195.178.110.67 - - [04/Sep/2026:22:29:34 +0000] "GET /.git/HEAD HTTP/1.1" 500 724 "-" "Mozilla/5.0" 20.198.81.88 - - [04/Sep/2026:22:29:40 +0000] "GET / HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:22:31:31 +0000] "GET / HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.197.17.142 - - [04/Sep/2026:22:45:51 +0000] "POST / HTTP/1.1" 500 - "https://clicfinancement.ca/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:13 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:13 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:14 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:15 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:16 +0000] "GET /.git/config HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:17 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:18 +0000] "GET /.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:19 +0000] "GET /.env.local HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:20 +0000] "GET /.env.production HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:20 +0000] "GET /.env.staging HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:21 +0000] "GET /.env.development HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:22 +0000] "GET /.env.test HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:22 +0000] "GET /.env.remote HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:23 +0000] "GET /.env.bak HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:23 +0000] "GET /.env.backup HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:24 +0000] "GET /.env.save HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:24 +0000] "GET /.env.old HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:25 +0000] "GET /.env.sample HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:25 +0000] "GET /.env.example HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:26 +0000] "GET /.env.dev HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:27 +0000] "GET /.env.prod HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:28 +0000] "GET /.env.stage HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:28 +0000] "GET /.env.ci HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:29 +0000] "GET /.env.docker HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:29 +0000] "GET /.env.live HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:30 +0000] "GET /.env.preprod HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:30 +0000] "GET /.env.uat HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:31 +0000] "GET /.env.dist HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:31 +0000] "GET /.env.swp HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:32 +0000] "GET /.env~ HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:33 +0000] "GET /.env1 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:34 +0000] "GET /.env2 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:34 +0000] "GET /.env_copy HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:35 +0000] "GET /.env.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:35 +0000] "GET /.env.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:36 +0000] "GET /.env.yaml HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:36 +0000] "GET /.env.yml HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:37 +0000] "GET /app/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:37 +0000] "GET /apps/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:38 +0000] "GET /api/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:39 +0000] "GET /web/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:39 +0000] "GET /site/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:40 +0000] "GET /public/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:40 +0000] "GET /admin/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:41 +0000] "GET /backend/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:41 +0000] "GET /server/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:41 +0000] "GET /frontend/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:42 +0000] "GET /src/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:42 +0000] "GET /core/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:43 +0000] "GET /core/app/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:43 +0000] "GET /config/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:43 +0000] "GET /private/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:44 +0000] "GET /application/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:45 +0000] "GET /bootstrap/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:45 +0000] "GET /database/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:46 +0000] "GET /storage/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:46 +0000] "GET /var/www/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:47 +0000] "GET /var/www/html/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:47 +0000] "GET /current/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:48 +0000] "GET /release/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:48 +0000] "GET /releases/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:49 +0000] "GET /shared/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:49 +0000] "GET /deploy/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:50 +0000] "GET /build/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:50 +0000] "GET /dist/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:51 +0000] "GET /public_html/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:51 +0000] "GET /htdocs/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:52 +0000] "GET /www/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:53 +0000] "GET /html/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:53 +0000] "GET /live/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:54 +0000] "GET /prod/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:54 +0000] "GET /dev/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:54 +0000] "GET /staging/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:55 +0000] "GET /opt/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:56 +0000] "GET /laravel/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:56 +0000] "GET /symfony/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:57 +0000] "GET /wordpress/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:58 +0000] "GET /wp/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:58 +0000] "GET /cms/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:59 +0000] "GET /drupal/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:59 +0000] "GET /joomla/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:00 +0000] "GET /magento/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:01 +0000] "GET /shopify/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:01 +0000] "GET /prestashop/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:02 +0000] "GET /codeigniter/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:02 +0000] "GET /cakephp/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:02 +0000] "GET /zend/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:03 +0000] "GET /yii/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:03 +0000] "GET /laravel5/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:04 +0000] "GET /v1/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:04 +0000] "GET /v2/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:05 +0000] "GET /v3/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:06 +0000] "GET /api/v1/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:07 +0000] "GET /api/v2/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:07 +0000] "GET /rest/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:08 +0000] "GET /graphql/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:08 +0000] "GET /gateway/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:09 +0000] "GET /microservice/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:09 +0000] "GET /service/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:10 +0000] "GET /api/v3/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:11 +0000] "GET /api/dev/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:11 +0000] "GET /api/staging/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:12 +0000] "GET /vendor/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:13 +0000] "GET /lib/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:13 +0000] "GET /resources/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:14 +0000] "GET /assets/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:14 +0000] "GET /uploads/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:15 +0000] "GET /internal/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:16 +0000] "GET /tools/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:16 +0000] "GET /scripts/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:17 +0000] "GET /bin/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:17 +0000] "GET /sbin/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:18 +0000] "GET /local/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:18 +0000] "GET /portal/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:19 +0000] "GET /dashboard/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:20 +0000] "GET /panel/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:20 +0000] "GET /crm/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:20 +0000] "GET /erp/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:21 +0000] "GET /shop/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:22 +0000] "GET /store/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:22 +0000] "GET /saas/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:23 +0000] "GET /client/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:23 +0000] "GET /project/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:24 +0000] "GET /admin-panel/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:25 +0000] "GET /control-panel/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:26 +0000] "GET /user-panel/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:26 +0000] "GET /node/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:27 +0000] "GET /express/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:28 +0000] "GET /next/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:29 +0000] "GET /nuxt/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:29 +0000] "GET /nest/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:30 +0000] "GET /react/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:30 +0000] "GET /vue/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:31 +0000] "GET /angular/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:31 +0000] "GET /svelte/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:32 +0000] "GET /vite/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:33 +0000] "GET /backup/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:34 +0000] "GET /backups/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:34 +0000] "GET /old/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:35 +0000] "GET /tmp/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:36 +0000] "GET /temp/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:36 +0000] "GET /lab/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:37 +0000] "GET /cronlab/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:37 +0000] "GET /cron/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:38 +0000] "GET /en/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:39 +0000] "GET /administrator/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:40 +0000] "GET /psnlink/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:40 +0000] "GET /exapi/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:41 +0000] "GET /sitemaps/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:41 +0000] "GET /.env.backup1 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:42 +0000] "GET /.env.backup2 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:43 +0000] "GET /logs/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:43 +0000] "GET /cache/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:44 +0000] "GET /mailer/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:45 +0000] "GET /mail/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:45 +0000] "GET /email/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:46 +0000] "GET /smtp/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:47 +0000] "GET /mailing/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:48 +0000] "GET /notifications/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:49 +0000] "GET /notify/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:50 +0000] "GET /sender/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:51 +0000] "GET /campaign/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:52 +0000] "GET /newsletter/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:52 +0000] "GET /ses/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:53 +0000] "GET /sendgrid/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:54 +0000] "GET /sparkpost/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:55 +0000] "GET /postmark/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:56 +0000] "GET /mailgun/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:57 +0000] "GET /mandrill/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:58 +0000] "GET /mailjet/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:59 +0000] "GET /brevo/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:00 +0000] "GET /transactional/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:01 +0000] "GET /bulk/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:02 +0000] "GET /aws/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:03 +0000] "GET /azure/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:05 +0000] "GET /gcp/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:06 +0000] "GET /cloud/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:07 +0000] "GET /infrastructure/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:07 +0000] "GET /docker/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:08 +0000] "GET /k8s/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:09 +0000] "GET /kubernetes/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:10 +0000] "GET /terraform/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:10 +0000] "GET /ansible/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:11 +0000] "GET /.git/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:12 +0000] "GET /ci/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:12 +0000] "GET /cd/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:13 +0000] "GET /jenkins/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:14 +0000] "GET /gitlab/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:14 +0000] "GET /github/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:15 +0000] "GET /actions/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:15 +0000] "GET /circleci/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:16 +0000] "GET /travis/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:16 +0000] "GET /buildkite/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:17 +0000] "GET /mysql/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:18 +0000] "GET /postgres/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:18 +0000] "GET /mongodb/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:18 +0000] "GET /redis/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:19 +0000] "GET /elasticsearch/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:19 +0000] "GET /rabbitmq/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:20 +0000] "GET /kafka/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:21 +0000] "GET /queue/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:21 +0000] "GET /worker/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:22 +0000] "GET /job/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:22 +0000] "GET /test/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:23 +0000] "GET /qa/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:24 +0000] "GET /preview/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:24 +0000] "GET /beta/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:25 +0000] "GET /uat/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:26 +0000] "GET /stage/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:26 +0000] "GET /development/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:27 +0000] "GET /production/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:28 +0000] "GET /config/app/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:28 +0000] "GET /phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:29 +0000] "GET /info.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:29 +0000] "GET /php.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:30 +0000] "GET /i.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:30 +0000] "GET /pi.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:30 +0000] "GET /pinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:31 +0000] "GET /test.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:31 +0000] "GET /phpinfo HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:32 +0000] "GET /p.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:32 +0000] "GET /debug.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:33 +0000] "GET /admin/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:33 +0000] "GET /test/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:34 +0000] "GET /dev/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:35 +0000] "GET /old/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:36 +0000] "GET /tmp/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:36 +0000] "GET /public/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:37 +0000] "GET /info HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:38 +0000] "GET /php-info.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:38 +0000] "GET /phpversion.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:39 +0000] "GET /_phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:39 +0000] "GET /old_phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:40 +0000] "GET /server-info.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:41 +0000] "GET /server-status.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:41 +0000] "GET /_profiler/phpinfo HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:42 +0000] "GET /_environment HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:42 +0000] "GET /webroot/index.php/_environment HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:43 +0000] "GET /mail/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:44 +0000] "GET /cpanel/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:44 +0000] "GET /hosting/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:45 +0000] "GET /webmail/phpinfo.php HTTP/1.1" 200 34902 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:46 +0000] "GET /smtp/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:46 +0000] "GET /phpinfo.php.bak HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:47 +0000] "GET /phpinfo.php.old HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:47 +0000] "GET /phpinfo.php~ HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:48 +0000] "GET /info.php.bak HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:49 +0000] "GET /phpinfo.php.save HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:49 +0000] "GET /staging/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:50 +0000] "GET /beta/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:50 +0000] "GET /uat/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:51 +0000] "GET /qa/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:52 +0000] "GET /preview/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:52 +0000] "GET /www/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:53 +0000] "GET /htdocs/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:53 +0000] "GET /public_html/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:53 +0000] "GET /site/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:54 +0000] "GET /docs/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:54 +0000] "GET /wp-admin/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:55 +0000] "GET /administrator/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:55 +0000] "GET /core/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:56 +0000] "GET /includes/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:56 +0000] "GET /service-account.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:56 +0000] "GET /sa.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:57 +0000] "GET /gcp-key.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:58 +0000] "GET /gcp-credentials.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:58 +0000] "GET /gcp-sa.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:59 +0000] "GET /credentials.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:59 +0000] "GET /google-credentials.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:00 +0000] "GET /google-key.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:00 +0000] "GET /.config/gcloud/application_default_credentials.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:01 +0000] "GET /application_default_credentials.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:01 +0000] "GET /key.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:02 +0000] "GET /keyfile.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:02 +0000] "GET /firebase-adminsdk.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:03 +0000] "GET /firebase-key.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:03 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:23:14:34 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 78.177.131.169 - - [04/Sep/2026:23:20:47 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36" 20.194.2.112 - - [04/Sep/2026:23:46:10 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 35.233.231.1 - - [05/Sep/2026:00:00:26 +0000] "GET / HTTP/1.1" 400 52 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
Save
cmd:
run