/var/log/apache2/domlogs/techb158/
/var/log/apache2/domlogs/techb158
NameSizeModeActions
abdallabala.techbala.com230971400640editdlrm
abdallabala.techbala.com-ssl_log472788690640editdlrm
aleamaralawal.com.techbala.com143940640editdlrm
aleamaralawal.com.techbala.com-ssl_log1332580640editdlrm
bala.techbala.ca00640editdlrm
bala.techbala.ca-ssl_log4110640editdlrm
bala.techbala.com00640editdlrm
bala.techbala.com-ssl_log00640editdlrm
balacoffee.com.techbala.com115930640editdlrm
balacoffee.com.techbala.com-ssl_log1090860640editdlrm
balacoffees.techbala.com00640editdlrm
balacoffees.techbala.com-ssl_log00640editdlrm
balagrouptechnologies.techbala.com00640editdlrm
balagrouptechnologies.techbala.com-ssl_log00640editdlrm
belady-ly.techbala.com00640editdlrm
belady-ly.techbala.com-ssl_log00640editdlrm
beladygroup.techbala.com00640editdlrm
beladygroup.techbala.com-ssl_log00640editdlrm
carlosbeauregard.techbala.com00640editdlrm
carlosbeauregard.techbala.com-ssl_log00640editdlrm
charismaticmovers.techbala.com62810640editdlrm
charismaticmovers.techbala.com-ssl_log7620640editdlrm
chatmaster.techbala.com00640editdlrm
chatmaster.techbala.com-ssl_log00640editdlrm
christophe-lesage.techbala.com8080640editdlrm
christophe-lesage.techbala.com-ssl_log00640editdlrm
clicfinancement.techbala.com205680640editdlrm
clicfinancement.techbala.com-ssl_log1722360640editdlrm
clicfinancementca.techbala.com261420640editdlrm
clicfinancementca.techbala.com-ssl_log2728940640editdlrm
convergencesoft.ca.techbala.com311590640editdlrm
convergencesoft.ca.techbala.com-ssl_log774320640editdlrm
convergencesoft.techbala.com309640640editdlrm
convergencesoft.techbala.com-ssl_log1650070640editdlrm
courtiersnetelite.techbala.com00640editdlrm
courtiersnetelite.techbala.com-ssl_log00640editdlrm
courtiersneteliteca.techbala.com00640editdlrm
courtiersneteliteca.techbala.com-ssl_log00640editdlrm
dany.techbala.com00640editdlrm
dany.techbala.com-ssl_log00640editdlrm
dev.aleamaralawal.com88840640editdlrm
dev.aleamaralawal.com-ssl_log160800640editdlrm
dev.balacoffee.com404269850640editdlrm
dev.balacoffee.com-ssl_log144814420640editdlrm
dlcrate.techbala.com00640editdlrm
dlcrate.techbala.com-ssl_log00640editdlrm
dominion.techbala.com00640editdlrm
dominion.techbala.com-ssl_log00640editdlrm
dominionbranch.techbala.com00640editdlrm
dominionbranch.techbala.com-ssl_log00640editdlrm
dominionhypothecairesca.techbala.com00640editdlrm
dominionhypothecairesca.techbala.com-ssl_log00640editdlrm
dominionhypothecairescom.techbala.com00640editdlrm
dominionhypothecairescom.techbala.com-ssl_log00640editdlrm
dominionlendingbranch.techbala.com00640editdlrm
dominionlendingbranch.techbala.com-ssl_log00640editdlrm
equipeballaro.techbala.com00640editdlrm
equipeballaro.techbala.com-ssl_log00640editdlrm
equipeballaroca.techbala.com00640editdlrm
equipeballaroca.techbala.com-ssl_log00640editdlrm
eshop.techbala.com00640editdlrm
eshop.techbala.com-ssl_log00640editdlrm
ex.abdallabala.com00640editdlrm
ex.abdallabala.com-ssl_log00640editdlrm
ex.techbala.com00640editdlrm
ex.techbala.com-ssl_log4120640editdlrm
exp.abdallabala.com2966430640editdlrm
exp.abdallabala.com-ssl_log50340640editdlrm
expense.abdallabala.com00640editdlrm
expense.abdallabala.com-ssl_log4550640editdlrm
family.techbala.com00640editdlrm
family.techbala.com-ssl_log00640editdlrm
financementhypotheque.com.techbala.com00640editdlrm
financementhypotheque.com.techbala.com-ssl_log00640editdlrm
francisgallanthypotheque.techbala.com32990640editdlrm
francisgallanthypotheque.techbala.com-ssl_log145370640editdlrm
frantzihypotheque.techbala.com106600640editdlrm
frantzihypotheque.techbala.com-ssl_log794110640editdlrm
geodominion.techbala.com00640editdlrm
geodominion.techbala.com-ssl_log00640editdlrm
gfelite.techbala.com00640editdlrm
gfelite.techbala.com-ssl_log00640editdlrm
groupetransit.techbala.com00640editdlrm
groupetransit.techbala.com-ssl_log00640editdlrm
hypotheque-pret.techbala.com00640editdlrm
hypotheque-pret.techbala.com-ssl_log00640editdlrm
hypothequecenter.techbala.com00640editdlrm
hypothequecenter.techbala.com-ssl_log00640editdlrm
hypothequechristinelemieux.techbala.com25140640editdlrm
hypothequechristinelemieux.techbala.com-ssl_log435790640editdlrm
hypothequemultilogement.techbala.com00640editdlrm
hypothequemultilogement.techbala.com-ssl_log00640editdlrm
hypothequephenix.techbala.com664060640editdlrm
hypothequephenix.techbala.com-ssl_log1316230640editdlrm
hypothequepretweb.techbala.com00640editdlrm
hypothequepretweb.techbala.com-ssl_log00640editdlrm
hypothequesanssoucis.techbala.com00640editdlrm
hypothequesanssoucis.techbala.com-ssl_log00640editdlrm
hypothequetoimieux.techbala.com107880640editdlrm
hypothequetoimieux.techbala.com-ssl_log227110640editdlrm
ictcreations.ca.techbala.com00640editdlrm
ictcreations.ca.techbala.com-ssl_log00640editdlrm
ictcreations.techbala.com00640editdlrm
ictcreations.techbala.com-ssl_log00640editdlrm
ileadtechnologies.techbala.com227930640editdlrm
ileadtechnologies.techbala.com-ssl_log2259030640editdlrm
ileadtechnology.com.techbala.com313680640editdlrm
ileadtechnology.com.techbala.com-ssl_log3852000640editdlrm
immovalet.ca.techbala.com102930710640editdlrm
immovalet.ca.techbala.com-ssl_log93971570640editdlrm
immovalet.techbala.com850508140640editdlrm
immovalet.techbala.com-ssl_log481802220640editdlrm
immovaletca.techbala.com00640editdlrm
immovaletca.techbala.com-ssl_log00640editdlrm
l2hypotheques.com.techbala.com3729900640editdlrm
l2hypotheques.com.techbala.com-ssl_log5621930640editdlrm
landingpage.techbala.com00640editdlrm
landingpage.techbala.com-ssl_log00640editdlrm
lazrqlojistik.com.techbala.com2890999700640editdlrm
lazrqlojistik.com.techbala.com-ssl_log157831080640editdlrm
loginsystem.techbala.com00640editdlrm
loginsystem.techbala.com-ssl_log00640editdlrm
longwaymovingexperts.com.techbala.com00640editdlrm
longwaymovingexperts.com.techbala.com-ssl_log00640editdlrm
marinamendeleva.techbala.com33330640editdlrm
marinamendeleva.techbala.com-ssl_log58890640editdlrm
masuccursale.clicfinancement.com00640editdlrm
masuccursale.clicfinancement.com-ssl_log00640editdlrm
masuccursale.techbala.com00640editdlrm
masuccursale.techbala.com-ssl_log00640editdlrm
masuccursaledominion.techbala.com00640editdlrm
masuccursaledominion.techbala.com-ssl_log00640editdlrm
masuccursaledominionca.techbala.com3200640editdlrm
masuccursaledominionca.techbala.com-ssl_log00640editdlrm
matthieust-laurent.techbala.com31980640editdlrm
matthieust-laurent.techbala.com-ssl_log74440640editdlrm
maxautos.techbala.com135760640editdlrm
maxautos.techbala.com-ssl_log107720640editdlrm
metroimmobilier.techbala.com00640editdlrm
metroimmobilier.techbala.com-ssl_log00640editdlrm
metroimmobilierca.techbala.com00640editdlrm
metroimmobilierca.techbala.com-ssl_log00640editdlrm
monphenix.techbala.com1317630460640editdlrm
monphenix.techbala.com-ssl_log2980197830640editdlrm
monphenixcs.techbala.com3410699700640editdlrm
monphenixcs.techbala.com-ssl_log781610040640editdlrm
multilogementsclub.techbala.com00640editdlrm
multilogementsclub.techbala.com-ssl_log00640editdlrm
my.techbala.com2644790640editdlrm
my.techbala.com-ssl_log1927170640editdlrm
mydoiniontest.techbala.com00640editdlrm
mydoiniontest.techbala.com-ssl_log00640editdlrm
mydominionbranch.techbala.com00640editdlrm
mydominionbranch.techbala.com-ssl_log00640editdlrm
mydominionbranchca.techbala.com00640editdlrm
mydominionbranchca.techbala.com-ssl_log00640editdlrm
myrate.techbala.com00640editdlrm
myrate.techbala.com-ssl_log00640editdlrm
myratebid.techbala.com48890640editdlrm
myratebid.techbala.com-ssl_log2527940640editdlrm
myreport.techbala.com00640editdlrm
myreport.techbala.com-ssl_log00640editdlrm
mytest.techbala.com00640editdlrm
mytest.techbala.com-ssl_log00640editdlrm
mytradingreport.techbala.com00640editdlrm
mytradingreport.techbala.com-ssl_log00640editdlrm
myweb.techbala.com00640editdlrm
myweb.techbala.com-ssl_log00640editdlrm
n8n.abdallabala.com00640editdlrm
n8n.abdallabala.com-ssl_log00640editdlrm
n8n.ileadtechnology.com2180640editdlrm
n8n.ileadtechnology.com-ssl_log9600640editdlrm
nathalielegerhypotheque.techbala.com29620640editdlrm
nathalielegerhypotheque.techbala.com-ssl_log219570640editdlrm
newlocation.techbala.com00640editdlrm
newlocation.techbala.com-ssl_log00640editdlrm
newmap.techbala.com00640editdlrm
newmap.techbala.com-ssl_log00640editdlrm
newmyratebid.techbala.com00640editdlrm
newmyratebid.techbala.com-ssl_log00640editdlrm
on-time-movers.com.techbala.com442387500640editdlrm
on-time-movers.com.techbala.com-ssl_log35688130640editdlrm
on-time-movers.techbala.com00640editdlrm
on-time-movers.techbala.com-ssl_log00640editdlrm
pierredewolffinance.techbala.com00640editdlrm
pierredewolffinance.techbala.com-ssl_log00640editdlrm
placechurchill.techbala.com00640editdlrm
placechurchill.techbala.com-ssl_log00640editdlrm
placechurchillca.techbala.com00640editdlrm
placechurchillca.techbala.com-ssl_log00640editdlrm
pneus-parfait.techbala.com00640editdlrm
pneus-parfait.techbala.com-ssl_log00640editdlrm
pneusparfait.com.techbala.com411070640editdlrm
pneusparfait.com.techbala.com-ssl_log106300640editdlrm
polimedica-tr.techbala.com00640editdlrm
polimedica-tr.techbala.com-ssl_log00640editdlrm
pret-hypothecaire-laval.com.techbala.com00640editdlrm
pret-hypothecaire-laval.com.techbala.com-ssl_log00640editdlrm
pret-hypothecaire-montreal.com.techbala.com00640editdlrm
pret-hypothecaire-montreal.com.techbala.com-ssl_log00640editdlrm
prets-hypotheque-dominion.techbala.com00640editdlrm
prets-hypotheque-dominion.techbala.com-ssl_log00640editdlrm
prets-hypothequefrancineperrier-ca.techbala.com00640editdlrm
prets-hypothequefrancineperrier-ca.techbala.com-ssl_log00640editdlrm
prets-hypothequefrancineperrier.techbala.com00640editdlrm
prets-hypothequefrancineperrier.techbala.com-ssl_log00640editdlrm
prets-hypotheques-quebec.com.techbala.com00640editdlrm
prets-hypotheques-quebec.com.techbala.com-ssl_log00640editdlrm
pretshypothequecom.techbala.com00640editdlrm
pretshypothequecom.techbala.com-ssl_log00640editdlrm
primomovers.techbala.com210157970640editdlrm
primomovers.techbala.com-ssl_log2111800640editdlrm
primomoversca.techbala.com468020640editdlrm
primomoversca.techbala.com-ssl_log12047190640editdlrm
report.techbala.com00640editdlrm
report.techbala.com-ssl_log00640editdlrm
secondlend.techbala.com00640editdlrm
secondlend.techbala.com-ssl_log00640editdlrm
sharing.techbala.com00640editdlrm
sharing.techbala.com-ssl_log00640editdlrm
skinny-movers.techbala.com00640editdlrm
skinny-movers.techbala.com-ssl_log00640editdlrm
solutionshypotheque.techbala.com700370640editdlrm
solutionshypotheque.techbala.com-ssl_log1041310640editdlrm
ssl.techbala.com00640editdlrm
ssl.techbala.com-ssl_log00640editdlrm
subroot.techbala.com00640editdlrm
subroot.techbala.com-ssl_log00640editdlrm
sum.myreport.techbala.com00640editdlrm
sum.myreport.techbala.com-ssl_log00640editdlrm
sum.techbala.com00640editdlrm
sum.techbala.com-ssl_log1580640editdlrm
sumtest.techbala.com00640editdlrm
sumtest.techbala.com-ssl_log00640editdlrm
sumtradingreports.techbala.com00640editdlrm
sumtradingreports.techbala.com-ssl_log00640editdlrm
techbala.ca.techbala.com2595989850640editdlrm
techbala.ca.techbala.com-ssl_log77843010640editdlrm
techbala.com13624580640editdlrm
techbala.com-ssl_log937171270640editdlrm
techbala.techbala.com79130640editdlrm
techbala.techbala.com-ssl_log225890640editdlrm
test.techbala.com00640editdlrm
test.techbala.com-ssl_log4140640editdlrm
testbala.techbala.com00640editdlrm
testbala.techbala.com-ssl_log00640editdlrm
trend.techbala.com00640editdlrm
trend.techbala.com-ssl_log00640editdlrm
trendlyall.techbala.com00640editdlrm
trendlyall.techbala.com-ssl_log00640editdlrm
unehypotheque.techbala.com00640editdlrm
unehypotheque.techbala.com-ssl_log00640editdlrm
upload.abdallabala.com00640editdlrm
upload.abdallabala.com-ssl_log00640editdlrm
uploadmetro.techbala.com00640editdlrm
uploadmetro.techbala.com-ssl_log00640editdlrm
valet.immovalet.com00640editdlrm
valet.immovalet.com-ssl_log00640editdlrm
valet.techbala.com00640editdlrm
valet.techbala.com-ssl_log00640editdlrm
valetm.techbala.com00640editdlrm
valetm.techbala.com-ssl_log00640editdlrm
votresuccursale.ca.techbala.com00640editdlrm
votresuccursale.ca.techbala.com-ssl_log00640editdlrm
votresuccursale.techbala.com00640editdlrm
votresuccursale.techbala.com-ssl_log00640editdlrm
votresuccursalehypothecaireca.techbala.com00640editdlrm
votresuccursalehypothecaireca.techbala.com-ssl_log00640editdlrm
votresuccursalehypothecairecom.techbala.com00640editdlrm
votresuccursalehypothecairecom.techbala.com-ssl_log00640editdlrm
wafertraining.techbala.com00640editdlrm
wafertraining.techbala.com-ssl_log00640editdlrm
web.techbala.com00640editdlrm
web.techbala.com-ssl_log4130640editdlrm
workloadmatch.techbala.com215170640editdlrm
workloadmatch.techbala.com-ssl_log3611790640editdlrm
_wildcard_.techbala.com2696150640editdlrm
_wildcard_.techbala.com-ssl_log30945240640editdlrm
Edit: /var/log/apache2/domlogs/techb158/clicfinancement.techbala.com-ssl_log (172236B)
131.0.197.58 - - [04/Sep/2026:12:53:07 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_5_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Safari/537.36" 34.14.193.187 - - [04/Sep/2026:13:20:34 +0000] "GET /.env.example HTTP/1.1" 500 722 "-" "crusader-worker/1.0" 34.14.193.187 - - [04/Sep/2026:13:20:34 +0000] "GET /.env.backup HTTP/1.1" 500 722 "-" "crusader-worker/1.0" 34.14.193.187 - - [04/Sep/2026:13:20:34 +0000] "GET /storage/logs/laravel.log HTTP/1.1" 500 722 "-" "crusader-worker/1.0" 34.14.193.187 - - [04/Sep/2026:13:20:34 +0000] "GET /env HTTP/1.1" 500 722 "-" "crusader-worker/1.0" 34.14.193.187 - - [04/Sep/2026:13:20:34 +0000] "GET /.env.bak HTTP/1.1" 500 722 "-" "crusader-worker/1.0" 34.14.193.187 - - [04/Sep/2026:13:20:34 +0000] "GET /.env.dev HTTP/1.1" 500 722 "-" "crusader-worker/1.0" 34.14.193.187 - - [04/Sep/2026:13:20:34 +0000] "GET /.env.local HTTP/1.1" 500 722 "-" "crusader-worker/1.0" 34.14.193.187 - - [04/Sep/2026:13:20:34 +0000] "GET /.env.save HTTP/1.1" 500 722 "-" "crusader-worker/1.0" 34.14.193.187 - - [04/Sep/2026:13:20:34 +0000] "GET /wp-config.php~ HTTP/1.1" 500 722 "-" "crusader-worker/1.0" 34.14.193.187 - - [04/Sep/2026:13:20:34 +0000] "GET /actuator/env HTTP/1.1" 500 722 "-" "crusader-worker/1.0" 34.14.193.187 - - [04/Sep/2026:13:20:34 +0000] "GET /crusader-404-probe HTTP/1.1" 500 722 "-" "crusader-worker/1.0" 34.14.193.187 - - [04/Sep/2026:13:20:34 +0000] "GET /actuator/configprops HTTP/1.1" 500 722 "-" "crusader-worker/1.0" 34.14.193.187 - - [04/Sep/2026:13:20:34 +0000] "GET /.env HTTP/1.1" 500 722 "-" "crusader-worker/1.0" 34.14.193.187 - - [04/Sep/2026:13:20:34 +0000] "GET /wp-config.php.bak HTTP/1.1" 500 722 "-" "crusader-worker/1.0" 34.14.193.187 - - [04/Sep/2026:13:20:34 +0000] "GET /.env.production HTTP/1.1" 500 722 "-" "crusader-worker/1.0" 34.14.193.187 - - [04/Sep/2026:13:20:34 +0000] "GET /_ignition/health-check HTTP/1.1" 500 722 "-" "crusader-worker/1.0" 34.14.193.187 - - [04/Sep/2026:13:20:34 +0000] "GET /.env.old HTTP/1.1" 500 722 "-" "crusader-worker/1.0" 34.14.193.187 - - [04/Sep/2026:13:20:34 +0000] "GET /wp-config.php.swp HTTP/1.1" 500 722 "-" "crusader-worker/1.0" 34.14.193.187 - - [04/Sep/2026:13:20:34 +0000] "GET /.env.prod HTTP/1.1" 500 722 "-" "crusader-worker/1.0" 34.207.86.197 - - [04/Sep/2026:13:21:39 +0000] "POST / HTTP/1.1" 500 - "https://www.clicfinancement.techbala.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 51.68.236.72 - - [04/Sep/2026:13:28:10 +0000] "GET /robots.txt HTTP/1.1" 500 722 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 3.227.248.201 - - [04/Sep/2026:13:36:01 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 44.215.105.197 - - [04/Sep/2026:13:52:00 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 54.234.120.76 - - [04/Sep/2026:13:52:30 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 51.68.107.142 - - [04/Sep/2026:13:55:06 +0000] "GET /robots.txt HTTP/1.1" 500 722 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 106.75.147.111 - - [04/Sep/2026:13:59:00 +0000] "GET / HTTP/1.1" 200 40073 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" 3.67.93.35 - - [04/Sep/2026:14:04:50 +0000] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; DefaultsExposed/1.0; +https://defaults.exposed/headers)" 87.58.197.202 - - [04/Sep/2026:14:19:41 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:14:23:52 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:14:24:31 +0000] "GET /.git/HEAD HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:14:24:31 +0000] "GET /.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:14:25:11 +0000] "GET /.env.local HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:14:25:50 +0000] "GET /.env.production.local HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 103.160.172.244 - - [04/Sep/2026:14:48:29 +0000] "POST /xmlrpc.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.0.0 Safari/537.36" 209.50.181.102 - - [04/Sep/2026:14:50:09 +0000] "GET /wp-login.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 144.172.89.127 - - [04/Sep/2026:14:56:32 +0000] "GET /.git/config HTTP/1.1" 500 722 "-" "Mozilla/5.0 (X11; Linux x86_64)" 51.68.107.141 - - [04/Sep/2026:14:59:51 +0000] "GET /robots.txt HTTP/1.1" 500 722 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 45.148.10.67 - - [04/Sep/2026:15:50:32 +0000] "GET /.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:15:51:18 +0000] "GET /.env.local HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:15:51:19 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:15:52:00 +0000] "GET /.env.production HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:15:52:02 +0000] "GET /.git/HEAD HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:15:52:48 +0000] "GET /.env.production.local HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 157.55.39.223 - - [04/Sep/2026:15:52:53 +0000] "GET /robots.txt HTTP/1.1" 500 722 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:16:01:48 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [04/Sep/2026:16:07:59 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.61.161.39 - - [04/Sep/2026:16:10:32 +0000] "GET / HTTP/1.1" 200 482 "-" "Python/3.13 aiohttp/3.14.1" 157.55.39.223 - - [04/Sep/2026:16:16:18 +0000] "GET /robots.txt HTTP/1.1" 500 722 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 44.214.139.176 - - [04/Sep/2026:16:21:38 +0000] "POST / HTTP/1.1" 500 - "https://www.clicfinancement.techbala.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 3.83.4.91 - - [04/Sep/2026:16:22:00 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 157.55.39.223 - - [04/Sep/2026:16:32:58 +0000] "GET /robots.txt HTTP/1.1" 500 722 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 40.77.167.24 - - [04/Sep/2026:16:33:05 +0000] "GET /CONSEILS.html HTTP/1.1" 500 722 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 106.75.175.213 - - [04/Sep/2026:16:33:11 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" 106.75.175.213 - - [04/Sep/2026:16:33:16 +0000] "GET /favicon.ico HTTP/1.1" 500 722 "https://clicfinancement.com" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" 54.157.112.104 - - [04/Sep/2026:16:44:42 +0000] "POST / HTTP/1.1" 500 - "https://clicfinancement.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 54.234.120.76 - - [04/Sep/2026:17:08:48 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 114.119.157.57 - - [04/Sep/2026:17:17:08 +0000] "GET /CONSEILS.html HTTP/1.1" 500 722 "https://clicfinancement.com/CONSEILS.html" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (HTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 45.148.10.122 - - [04/Sep/2026:17:29:37 +0000] "GET /api/session/properties HTTP/1.1" 500 722 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" 45.148.10.67 - - [04/Sep/2026:17:41:48 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:17:42:22 +0000] "GET /.git/HEAD HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:17:42:22 +0000] "GET /.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 94.154.43.180 - - [04/Sep/2026:17:42:38 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 94.154.43.74 - - [04/Sep/2026:17:42:40 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:17:43:01 +0000] "GET /.env.local HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:17:43:41 +0000] "GET /.env.production HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 44.222.152.81 - - [04/Sep/2026:18:38:42 +0000] "POST / HTTP/1.1" 500 - "https://clicfinancement.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 195.178.110.22 - - [04/Sep/2026:19:07:38 +0000] "GET /backup.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:38 +0000] "GET /backup.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:38 +0000] "GET /backup.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:38 +0000] "GET /backup.tgz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:38 +0000] "GET /backup.rar HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:38 +0000] "GET /backup.7z HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:38 +0000] "GET /backups.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:38 +0000] "GET /www.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:38 +0000] "GET /www.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:39 +0000] "GET /wwwroot.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:39 +0000] "GET /wwwroot.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:39 +0000] "GET /htdocs.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:39 +0000] "GET /htdocs.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:39 +0000] "GET /public_html.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:39 +0000] "GET /public_html.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:39 +0000] "GET /web.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:39 +0000] "GET /website.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /site.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /html.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /app.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /old.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /bak.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /data.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /backup.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /db.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /database.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /dump.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /db_backup.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /dbdump.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /mysql.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /mysqldump.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /data.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /users.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /www.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /site.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /sql.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /1.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /localhost.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /backup.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /db.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /dump.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /database.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /db_backup.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /mysql.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /database.sqlite HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /db.sqlite HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /backup.bak HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /db.bak HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /database.bak HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /data.bak HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /wp-content/uploads/dump.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /wp-content/uploads/backup.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /wp-content/uploads/database.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /wp-content/database.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /wp-content/mysql.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /backups/database.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /cpanel.clicfinancement.com.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /cpanel.clicfinancement.com.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /cpanel.clicfinancement.com_db.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /cpanel.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /cpanel.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /cpanel.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /2026.zip HTTP/1.1" 404 5749 "-" "-" 20.205.10.93 - - [04/Sep/2026:19:12:28 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:19:12:28 +0000] "GET /autoload_classmap.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:19:12:29 +0000] "GET /post.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:19:12:30 +0000] "GET /1.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:19:12:31 +0000] "GET /flower.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:19:12:31 +0000] "GET /admin.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 102.205.188.64 - - [04/Sep/2026:19:12:37 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.98 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:19:26:00 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:19:26:00 +0000] "GET /autoload_classmap.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:19:26:01 +0000] "GET /post.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.246.253.24 - - [04/Sep/2026:19:36:08 +0000] "GET /robots.txt HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:19:51:20 +0000] "GET /.env.production HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:19:52:02 +0000] "GET /.env.production.local HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:19:52:05 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:19:52:05 +0000] "GET /.env.local HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:19:52:05 +0000] "GET /.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:19:52:48 +0000] "GET /.env.prod HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:19:52:51 +0000] "GET /.git/HEAD HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:19:53:27 +0000] "GET /.env.staging HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:19:59:23 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:19:59:23 +0000] "GET /autoload_classmap.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:19:59:24 +0000] "GET /post.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:19:59:25 +0000] "GET /1.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:19:59:25 +0000] "GET /flower.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:19:59:26 +0000] "GET /admin.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:19:59:27 +0000] "GET /file.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:19:59:28 +0000] "GET /meta.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:20:04:26 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:20:04:27 +0000] "GET /autoload_classmap.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:20:04:27 +0000] "GET /post.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:20:04:28 +0000] "GET /1.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:20:04:29 +0000] "GET /flower.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:20:04:30 +0000] "GET /admin.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:21:20:11 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 34.91.100.6 - - [04/Sep/2026:21:36:28 +0000] "GET / HTTP/1.1" 200 482 "-" "Scrapy/2.17.0 (+https://scrapy.org)" 54.87.57.12 - - [04/Sep/2026:22:02:43 +0000] "GET / HTTP/1.1" 200 482 "http://lambda.qsensei.com/" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36" 54.87.57.12 - - [04/Sep/2026:22:02:43 +0000] "GET / HTTP/1.1" 200 482 "http://www.youdao.com/" "Mozilla/5.0 (X11; CrOS x86_64 14150.87.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.124 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:22:41:02 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:22:41:24 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:22:42:02 +0000] "GET /.git/HEAD HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:22:42:02 +0000] "GET /.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:22:42:41 +0000] "GET /.env.local HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [04/Sep/2026:22:43:19 +0000] "GET /.env.production HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 20.194.2.112 - - [04/Sep/2026:22:44:04 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:13 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:13 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:14 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:15 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:16 +0000] "GET /.git/config HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:16 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:16 +0000] "GET /.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:17 +0000] "GET /.env.local HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:18 +0000] "GET /.env.production HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:18 +0000] "GET /.env.staging HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:19 +0000] "GET /.env.development HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:20 +0000] "GET /.env.test HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:20 +0000] "GET /.env.remote HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:21 +0000] "GET /.env.bak HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:21 +0000] "GET /.env.backup HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:21 +0000] "GET /.env.save HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:22 +0000] "GET /.env.old HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:23 +0000] "GET /.env.sample HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:23 +0000] "GET /.env.example HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:24 +0000] "GET /.env.dev HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:24 +0000] "GET /.env.prod HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:25 +0000] "GET /.env.stage HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:25 +0000] "GET /.env.ci HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:26 +0000] "GET /.env.docker HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:26 +0000] "GET /.env.live HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:27 +0000] "GET /.env.preprod HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:28 +0000] "GET /.env.uat HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:28 +0000] "GET /.env.dist HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:29 +0000] "GET /.env.swp HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:29 +0000] "GET /.env~ HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:30 +0000] "GET /.env1 HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:30 +0000] "GET /.env2 HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:31 +0000] "GET /.env_copy HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:31 +0000] "GET /.env.txt HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:32 +0000] "GET /.env.json HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:32 +0000] "GET /.env.yaml HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:33 +0000] "GET /.env.yml HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:33 +0000] "GET /app/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:34 +0000] "GET /apps/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:35 +0000] "GET /api/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:35 +0000] "GET /web/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:35 +0000] "GET /site/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:36 +0000] "GET /public/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:36 +0000] "GET /admin/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:37 +0000] "GET /backend/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:37 +0000] "GET /server/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:37 +0000] "GET /frontend/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:38 +0000] "GET /src/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:39 +0000] "GET /core/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:39 +0000] "GET /core/app/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:40 +0000] "GET /config/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:40 +0000] "GET /private/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:41 +0000] "GET /application/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:41 +0000] "GET /bootstrap/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:42 +0000] "GET /database/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:43 +0000] "GET /storage/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:43 +0000] "GET /var/www/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:43 +0000] "GET /var/www/html/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:44 +0000] "GET /current/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:45 +0000] "GET /release/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:45 +0000] "GET /releases/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:45 +0000] "GET /shared/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:46 +0000] "GET /deploy/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:46 +0000] "GET /build/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:47 +0000] "GET /dist/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:47 +0000] "GET /public_html/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:47 +0000] "GET /htdocs/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:48 +0000] "GET /www/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:49 +0000] "GET /html/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:49 +0000] "GET /live/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:50 +0000] "GET /prod/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:51 +0000] "GET /dev/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:51 +0000] "GET /staging/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:52 +0000] "GET /opt/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:52 +0000] "GET /laravel/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:53 +0000] "GET /symfony/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:53 +0000] "GET /wordpress/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:54 +0000] "GET /wp/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:55 +0000] "GET /cms/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:56 +0000] "GET /drupal/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:56 +0000] "GET /joomla/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:56 +0000] "GET /magento/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:56 +0000] "GET /shopify/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:57 +0000] "GET /prestashop/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:58 +0000] "GET /codeigniter/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:58 +0000] "GET /cakephp/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:59 +0000] "GET /zend/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:00 +0000] "GET /yii/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:01 +0000] "GET /laravel5/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:02 +0000] "GET /v1/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:02 +0000] "GET /v2/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:03 +0000] "GET /v3/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:04 +0000] "GET /api/v1/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:04 +0000] "GET /api/v2/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:05 +0000] "GET /rest/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:05 +0000] "GET /graphql/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:06 +0000] "GET /gateway/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:06 +0000] "GET /microservice/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:06 +0000] "GET /service/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:07 +0000] "GET /api/v3/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:08 +0000] "GET /api/dev/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:09 +0000] "GET /api/staging/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:09 +0000] "GET /vendor/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:10 +0000] "GET /lib/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:11 +0000] "GET /resources/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:11 +0000] "GET /assets/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:12 +0000] "GET /uploads/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:12 +0000] "GET /internal/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:14 +0000] "GET /tools/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:14 +0000] "GET /scripts/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:15 +0000] "GET /bin/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:15 +0000] "GET /sbin/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:16 +0000] "GET /local/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:16 +0000] "GET /portal/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:17 +0000] "GET /dashboard/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:17 +0000] "GET /panel/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:18 +0000] "GET /crm/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:19 +0000] "GET /erp/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:20 +0000] "GET /shop/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:20 +0000] "GET /store/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:21 +0000] "GET /saas/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:21 +0000] "GET /client/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:22 +0000] "GET /project/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:23 +0000] "GET /admin-panel/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:23 +0000] "GET /control-panel/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:24 +0000] "GET /user-panel/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:25 +0000] "GET /node/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:26 +0000] "GET /express/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:27 +0000] "GET /next/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:28 +0000] "GET /nuxt/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:29 +0000] "GET /nest/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:30 +0000] "GET /react/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:31 +0000] "GET /vue/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:32 +0000] "GET /angular/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:33 +0000] "GET /svelte/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:33 +0000] "GET /vite/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:34 +0000] "GET /backup/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:35 +0000] "GET /backups/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:35 +0000] "GET /old/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:36 +0000] "GET /tmp/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:37 +0000] "GET /temp/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:38 +0000] "GET /lab/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:39 +0000] "GET /cronlab/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:39 +0000] "GET /cron/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:40 +0000] "GET /en/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:41 +0000] "GET /administrator/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:41 +0000] "GET /psnlink/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:42 +0000] "GET /exapi/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:43 +0000] "GET /sitemaps/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:44 +0000] "GET /.env.backup1 HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:44 +0000] "GET /.env.backup2 HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:45 +0000] "GET /logs/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:46 +0000] "GET /cache/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:46 +0000] "GET /mailer/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:47 +0000] "GET /mail/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:48 +0000] "GET /email/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:49 +0000] "GET /smtp/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:49 +0000] "GET /mailing/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:50 +0000] "GET /notifications/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:51 +0000] "GET /notify/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:51 +0000] "GET /sender/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:53 +0000] "GET /campaign/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:54 +0000] "GET /newsletter/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:55 +0000] "GET /ses/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:56 +0000] "GET /sendgrid/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:56 +0000] "GET /sparkpost/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:57 +0000] "GET /postmark/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:58 +0000] "GET /mailgun/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:59 +0000] "GET /mandrill/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:59 +0000] "GET /mailjet/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:00 +0000] "GET /brevo/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:01 +0000] "GET /transactional/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:02 +0000] "GET /bulk/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:02 +0000] "GET /aws/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:04 +0000] "GET /azure/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:06 +0000] "GET /gcp/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:06 +0000] "GET /cloud/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:08 +0000] "GET /infrastructure/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:08 +0000] "GET /docker/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:09 +0000] "GET /k8s/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:10 +0000] "GET /kubernetes/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:10 +0000] "GET /terraform/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:11 +0000] "GET /ansible/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:12 +0000] "GET /.git/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:13 +0000] "GET /ci/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:13 +0000] "GET /cd/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:14 +0000] "GET /jenkins/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:14 +0000] "GET /gitlab/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:15 +0000] "GET /github/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:16 +0000] "GET /actions/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:16 +0000] "GET /circleci/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:17 +0000] "GET /travis/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:18 +0000] "GET /buildkite/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:18 +0000] "GET /mysql/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:19 +0000] "GET /postgres/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:19 +0000] "GET /mongodb/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:20 +0000] "GET /redis/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:21 +0000] "GET /elasticsearch/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:21 +0000] "GET /rabbitmq/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:22 +0000] "GET /kafka/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:23 +0000] "GET /queue/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:23 +0000] "GET /worker/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:24 +0000] "GET /job/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:24 +0000] "GET /test/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:24 +0000] "GET /qa/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:25 +0000] "GET /preview/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:25 +0000] "GET /beta/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:26 +0000] "GET /uat/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:27 +0000] "GET /stage/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:27 +0000] "GET /development/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:28 +0000] "GET /production/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:29 +0000] "GET /config/app/.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:29 +0000] "GET /phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:30 +0000] "GET /info.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:30 +0000] "GET /php.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:31 +0000] "GET /i.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:31 +0000] "GET /pi.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:32 +0000] "GET /pinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:32 +0000] "GET /test.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:33 +0000] "GET /phpinfo HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:33 +0000] "GET /p.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:34 +0000] "GET /debug.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:34 +0000] "GET /admin/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:35 +0000] "GET /test/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:35 +0000] "GET /dev/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:35 +0000] "GET /old/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:36 +0000] "GET /tmp/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:37 +0000] "GET /public/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:38 +0000] "GET /info HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:38 +0000] "GET /php-info.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:38 +0000] "GET /phpversion.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:39 +0000] "GET /_phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:39 +0000] "GET /old_phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:40 +0000] "GET /server-info.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:40 +0000] "GET /server-status.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:41 +0000] "GET /_profiler/phpinfo HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:41 +0000] "GET /_environment HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:42 +0000] "GET /webroot/index.php/_environment HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:43 +0000] "GET /mail/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:44 +0000] "GET /cpanel/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:44 +0000] "GET /hosting/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:45 +0000] "GET /webmail/phpinfo.php HTTP/1.1" 200 34890 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:45 +0000] "GET /smtp/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:46 +0000] "GET /phpinfo.php.bak HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:46 +0000] "GET /phpinfo.php.old HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:47 +0000] "GET /phpinfo.php~ HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:47 +0000] "GET /info.php.bak HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:48 +0000] "GET /phpinfo.php.save HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:49 +0000] "GET /staging/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:49 +0000] "GET /beta/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:49 +0000] "GET /uat/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:50 +0000] "GET /qa/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:50 +0000] "GET /preview/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:51 +0000] "GET /www/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:52 +0000] "GET /htdocs/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:52 +0000] "GET /public_html/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:53 +0000] "GET /site/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:53 +0000] "GET /docs/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:54 +0000] "GET /wp-admin/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:54 +0000] "GET /administrator/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:55 +0000] "GET /core/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:55 +0000] "GET /includes/phpinfo.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:56 +0000] "GET /service-account.json HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:56 +0000] "GET /sa.json HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:57 +0000] "GET /gcp-key.json HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:57 +0000] "GET /gcp-credentials.json HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:58 +0000] "GET /gcp-sa.json HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:59 +0000] "GET /credentials.json HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:59 +0000] "GET /google-credentials.json HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:00 +0000] "GET /google-key.json HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:00 +0000] "GET /.config/gcloud/application_default_credentials.json HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:01 +0000] "GET /application_default_credentials.json HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:01 +0000] "GET /key.json HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:02 +0000] "GET /keyfile.json HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:03 +0000] "GET /firebase-adminsdk.json HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:03 +0000] "GET /firebase-key.json HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:04 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 44.222.152.81 - - [04/Sep/2026:23:24:52 +0000] "POST / HTTP/1.1" 500 - "https://www.clicfinancement.techbala.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 54.157.112.104 - - [04/Sep/2026:23:28:56 +0000] "POST / HTTP/1.1" 500 - "https://www.clicfinancement.techbala.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 172.245.112.199 - - [04/Sep/2026:23:51:23 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:134.0) Gecko/20100101 Firefox/134.0" 20.214.149.209 - - [05/Sep/2026:00:09:34 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:00:09:34 +0000] "GET /autoload_classmap.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:00:09:35 +0000] "GET /post.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:00:09:36 +0000] "GET /1.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:00:09:37 +0000] "GET /flower.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:00:09:37 +0000] "GET /admin.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:00:09:38 +0000] "GET /file.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:00:09:39 +0000] "GET /meta.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:00:09:40 +0000] "GET /index.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:00:09:40 +0000] "GET /abcd.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:00:09:41 +0000] "GET /about.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:00:09:42 +0000] "GET /randkeyword.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:00:09:43 +0000] "GET /goods.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:00:09:43 +0000] "GET /hehe.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:00:09:44 +0000] "GET /user.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:00:09:45 +0000] "GET /wp-2019.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:00:09:46 +0000] "GET /chosen.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:00:09:46 +0000] "GET /functions.phpA HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:00:09:47 +0000] "GET /cron.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:00:15:37 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:00:15:37 +0000] "GET /autoload_classmap.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:00:15:38 +0000] "GET /post.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:00:15:39 +0000] "GET /1.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:00:15:40 +0000] "GET /flower.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:00:15:40 +0000] "GET /admin.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:00:15:41 +0000] "GET /file.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:00:15:42 +0000] "GET /meta.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:00:15:43 +0000] "GET /index.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:00:15:44 +0000] "GET /abcd.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:00:15:45 +0000] "GET /about.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:00:15:46 +0000] "GET /randkeyword.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:00:15:46 +0000] "GET /goods.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:00:15:47 +0000] "GET /hehe.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:00:15:48 +0000] "GET /user.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:00:15:49 +0000] "GET /wp-2019.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:00:15:50 +0000] "GET /chosen.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:00:15:51 +0000] "GET /functions.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:00:15:51 +0000] "GET /cron.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:00:15:52 +0000] "GET /edit.phpA HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:00:28:08 +0000] "GET /.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:00:28:48 +0000] "GET /.env.local HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:00:28:50 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:00:29:29 +0000] "GET /.env.production HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:00:29:31 +0000] "GET /.git/HEAD HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:00:30:14 +0000] "GET /.env.production.local HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 198.235.24.3 - - [05/Sep/2026:00:39:02 +0000] "GET / HTTP/1.1" 200 482 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 110.249.202.111 - - [05/Sep/2026:00:51:09 +0000] "GET /robots.txt HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)" 111.225.148.199 - - [05/Sep/2026:00:55:06 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)" 47.128.123.148 - - [05/Sep/2026:01:58:37 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)" 20.214.149.209 - - [05/Sep/2026:02:08:28 +0000] "GET / HTTP/1.1" 200 12485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:28 +0000] "GET /autoload_classmap.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:29 +0000] "GET /post.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:29 +0000] "GET /1.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:29 +0000] "GET /flower.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:29 +0000] "GET /admin.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:30 +0000] "GET /file.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:30 +0000] "GET /meta.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:30 +0000] "GET /index.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:30 +0000] "GET /abcd.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:30 +0000] "GET /about.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:31 +0000] "GET /randkeyword.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:31 +0000] "GET /goods.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:31 +0000] "GET /hehe.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:31 +0000] "GET /user.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:31 +0000] "GET /wp-2019.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:32 +0000] "GET /chosen.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:32 +0000] "GET /functions.phpA HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:32 +0000] "GET /cron.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:32 +0000] "GET /edit.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:32 +0000] "GET /gecko-new.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:33 +0000] "GET /cookie.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:33 +0000] "GET /xleet.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:33 +0000] "GET /spip.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:33 +0000] "GET /22.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:33 +0000] "GET /room.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:34 +0000] "GET /disagreed.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:34 +0000] "GET /text.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:34 +0000] "GET /alfa-rex.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:34 +0000] "GET /alfa-rex.php7 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:34 +0000] "GET /feeds.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:35 +0000] "GET /radio.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:35 +0000] "GET /dropdown.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:35 +0000] "GET /defaults.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:35 +0000] "GET /system.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:35 +0000] "GET /xmlrpc.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:36 +0000] "GET /xmlrpc.php0 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:36 +0000] "GET /colors.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:36 +0000] "GET /updates.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:36 +0000] "GET /alfa-rex1.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:36 +0000] "GET /wp-index.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:37 +0000] "GET /wp-admin.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:37 +0000] "GET /alfa.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:37 +0000] "GET /alfanew.php7 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:37 +0000] "GET /locale.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:37 +0000] "GET /wxo.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:38 +0000] "GET /colour.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:38 +0000] "GET /files.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:38 +0000] "GET /install.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:38 +0000] "GET /wp-contentt.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:38 +0000] "GET /config.php7 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:39 +0000] "GET /config.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:39 +0000] "GET /theme.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:39 +0000] "GET /block-bindings.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:39 +0000] "GET /class_api.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:39 +0000] "GET /inputs.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:40 +0000] "GET /root.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:40 +0000] "GET /menu.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:40 +0000] "GET /plugin.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:40 +0000] "GET /cloud.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:40 +0000] "GET /configs.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:41 +0000] "GET /wp-configs.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:41 +0000] "GET /update.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:41 +0000] "GET /2.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:41 +0000] "GET /input.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:08:41 +0000] "GET /aaa.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:30 +0000] "GET / HTTP/1.1" 200 12490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:32 +0000] "GET /autoload_classmap.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:32 +0000] "GET /post.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:33 +0000] "GET /1.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:33 +0000] "GET /flower.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:33 +0000] "GET /admin.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:33 +0000] "GET /file.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:33 +0000] "GET /meta.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:34 +0000] "GET /index.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:34 +0000] "GET /abcd.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:34 +0000] "GET /about.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:34 +0000] "GET /randkeyword.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:35 +0000] "GET /goods.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:35 +0000] "GET /hehe.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:35 +0000] "GET /user.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:35 +0000] "GET /wp-2019.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:35 +0000] "GET /chosen.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:36 +0000] "GET /functions.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:36 +0000] "GET /cron.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:36 +0000] "GET /edit.phpA HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:36 +0000] "GET /gecko-new.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:37 +0000] "GET /cookie.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:37 +0000] "GET /xleet.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:37 +0000] "GET /spip.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:37 +0000] "GET /22.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:37 +0000] "GET /room.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:38 +0000] "GET /disagreed.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:38 +0000] "GET /text.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:38 +0000] "GET /alfa-rex.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:38 +0000] "GET /alfa-rex.php7 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:38 +0000] "GET /feeds.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:39 +0000] "GET /radio.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:39 +0000] "GET /dropdown.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:39 +0000] "GET /defaults.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:39 +0000] "GET /system.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:40 +0000] "GET /xmlrpc.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:40 +0000] "GET /xmlrpc.php0 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:40 +0000] "GET /colors.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:40 +0000] "GET /updates.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:40 +0000] "GET /alfa-rex1.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:41 +0000] "GET /wp-index.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:41 +0000] "GET /wp-admin.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:41 +0000] "GET /alfa.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:41 +0000] "GET /alfanew.php7 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:41 +0000] "GET /locale.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:42 +0000] "GET /wxo.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:42 +0000] "GET /colour.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:42 +0000] "GET /files.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:42 +0000] "GET /install.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:43 +0000] "GET /wp-contentt.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:43 +0000] "GET /config.php7 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:43 +0000] "GET /config.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:43 +0000] "GET /theme.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:43 +0000] "GET /block-bindings.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:44 +0000] "GET /class_api.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:44 +0000] "GET /inputs.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:44 +0000] "GET /root.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:44 +0000] "GET /menu.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:44 +0000] "GET /plugin.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:45 +0000] "GET /cloud.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:45 +0000] "GET /configs.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:45 +0000] "GET /wp-configs.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:45 +0000] "GET /update.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:46 +0000] "GET /2.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:46 +0000] "GET /input.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:13:46 +0000] "GET /aaa.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 198.235.24.143 - - [05/Sep/2026:02:19:56 +0000] "GET / HTTP/1.1" 400 52 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 94.154.43.129 - - [05/Sep/2026:02:32:44 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 45.148.10.74 - - [05/Sep/2026:02:39:23 +0000] "GET /.esmtprc%20 HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:02:50:56 +0000] "GET /.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:02:51:34 +0000] "GET /.env.local HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:02:51:52 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:02:52:14 +0000] "GET /.env.production HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:02:52:29 +0000] "GET /.git/HEAD HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:02:52:52 +0000] "GET /.env.production.local HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 20.151.10.161 - - [05/Sep/2026:02:54:01 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:01 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:01 +0000] "GET /46dbr8i8qeclytcxawrCdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:01 +0000] "GET /wp-links-opml.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:01 +0000] "GET /images2.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:01 +0000] "GET /f35.update.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:01 +0000] "GET /media.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:01 +0000] "GET /adminfuns.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:01 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:01 +0000] "GET /4PJcpMFsD8B.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:01 +0000] "GET /av.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:01 +0000] "GET /images.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:01 +0000] "GET /ops.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:01 +0000] "GET /BDKR28WP.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:01 +0000] "GET /k.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:01 +0000] "GET /dex.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:01 +0000] "GET /222.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:01 +0000] "GET /chosen.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:01 +0000] "GET /1.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:01 +0000] "GET /fling.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:01 +0000] "GET /radio.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:01 +0000] "GET /mac.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /simple.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /sallu.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /blacks.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /wp.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /wander.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /abcd.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /run.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /vpn.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /alfa.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /133.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /indo.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /wp-content/uploads/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /w.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /wp_blog_footer.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /robot.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /sss.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /gulu.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /replace.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /reviall.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /44.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /ded.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /BDKR28Wo.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /nxc.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:02 +0000] "GET /or.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:03 +0000] "GET /das.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:03 +0000] "GET /.well-known/nam.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:03 +0000] "GET /1d9e308d1fb8cd.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:03 +0000] "GET /cvx.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:03 +0000] "GET /vo8lvekd4hhiu6meydu56piCdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:03 +0000] "GET /406.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:03 +0000] "GET /bypass2.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:03 +0000] "GET /t.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:03 +0000] "GET /r57.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:03 +0000] "GET /ffile.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:03 +0000] "GET /xex.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:03 +0000] "GET /user-new.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:03 +0000] "GET /flash-kiss.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:03 +0000] "GET /k2.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:03 +0000] "GET /ftde.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:03 +0000] "GET /wp-blog.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:03 +0000] "GET /CAE-2.5.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [05/Sep/2026:02:54:03 +0000] "GET /ass.php HTTP/1.1" 401 36 "-" "-" 104.208.72.93 - - [05/Sep/2026:02:56:45 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:02:56:55 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.178.110.22 - - [05/Sep/2026:03:18:43 +0000] "GET /backup.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:43 +0000] "GET /backup.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:43 +0000] "GET /backup.tar.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:43 +0000] "GET /backup.tgz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:43 +0000] "GET /backup.rar HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:43 +0000] "GET /backup.7z HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:43 +0000] "GET /backups.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:43 +0000] "GET /www.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:44 +0000] "GET /www.tar.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:44 +0000] "GET /wwwroot.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:44 +0000] "GET /wwwroot.tar.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:44 +0000] "GET /htdocs.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:44 +0000] "GET /htdocs.tar.gz HTTP/1.1" 401 36 "-" "-" 66.249.74.98 - - [05/Sep/2026:03:18:44 +0000] "GET /robots.txt HTTP/1.1" 500 722 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 195.178.110.22 - - [05/Sep/2026:03:18:44 +0000] "GET /public_html.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:44 +0000] "GET /public_html.tar.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:44 +0000] "GET /web.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:44 +0000] "GET /website.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:45 +0000] "GET /site.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:45 +0000] "GET /html.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:45 +0000] "GET /app.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:45 +0000] "GET /old.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:45 +0000] "GET /bak.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:45 +0000] "GET /data.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:45 +0000] "GET /backup.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:45 +0000] "GET /db.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:46 +0000] "GET /database.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:46 +0000] "GET /dump.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:46 +0000] "GET /db_backup.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:46 +0000] "GET /dbdump.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:46 +0000] "GET /mysql.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:46 +0000] "GET /mysqldump.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:46 +0000] "GET /data.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:46 +0000] "GET /users.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:46 +0000] "GET /www.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:47 +0000] "GET /site.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:47 +0000] "GET /sql.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:47 +0000] "GET /1.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:47 +0000] "GET /localhost.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:47 +0000] "GET /backup.sql.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:47 +0000] "GET /db.sql.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:47 +0000] "GET /dump.sql.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:47 +0000] "GET /database.sql.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:47 +0000] "GET /db_backup.sql.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:48 +0000] "GET /mysql.sql.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:48 +0000] "GET /database.sqlite HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:48 +0000] "GET /db.sqlite HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:48 +0000] "GET /backup.bak HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:48 +0000] "GET /db.bak HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:48 +0000] "GET /database.bak HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:48 +0000] "GET /data.bak HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:48 +0000] "GET /wp-content/uploads/dump.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:48 +0000] "GET /wp-content/uploads/backup.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:49 +0000] "GET /wp-content/uploads/database.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:49 +0000] "GET /wp-content/database.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:49 +0000] "GET /wp-content/mysql.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:49 +0000] "GET /backups/database.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:49 +0000] "GET /webdisk.clicfinancement.com.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:49 +0000] "GET /webdisk.clicfinancement.com.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:49 +0000] "GET /webdisk.clicfinancement.com_db.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:49 +0000] "GET /webdisk.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:50 +0000] "GET /webdisk.tar.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:50 +0000] "GET /webdisk.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:50 +0000] "GET /2026.zip HTTP/1.1" 401 36 "-" "-" 143.198.149.87 - - [05/Sep/2026:03:19:34 +0000] "GET / HTTP/1.1" 400 52 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 143.198.149.87 - - [05/Sep/2026:03:19:37 +0000] "GET /favicon.ico HTTP/1.1" 400 52 "https://autodiscover.clicfinancement.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 198.235.24.152 - - [05/Sep/2026:03:26:38 +0000] "GET / HTTP/1.1" 401 36 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 106.75.173.168 - - [05/Sep/2026:03:45:15 +0000] "GET / HTTP/1.1" 401 36 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" 106.75.173.168 - - [05/Sep/2026:03:45:20 +0000] "GET /favicon.ico HTTP/1.1" 401 36 "https://cpcalendars.clicfinancement.com" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" 34.31.14.112 - - [05/Sep/2026:03:53:53 +0000] "GET /.git/config HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 106.75.128.148 - - [05/Sep/2026:04:22:33 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" 106.75.128.148 - - [05/Sep/2026:04:22:38 +0000] "GET /favicon.ico HTTP/1.1" 500 722 "https://mail.clicfinancement.com" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" 74.7.244.20 - - [05/Sep/2026:04:26:48 +0000] "GET /robots.txt HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 45.148.10.67 - - [05/Sep/2026:04:33:49 +0000] "GET /.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:04:34:32 +0000] "GET /.env.local HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:04:34:33 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:04:35:11 +0000] "GET /.env.production HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:04:35:12 +0000] "GET /.git/HEAD HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:04:35:52 +0000] "GET /.env.production.local HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 44.215.105.197 - - [05/Sep/2026:04:49:08 +0000] "POST / HTTP/1.1" 500 - "https://clicfinancement.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 110.249.201.22 - - [05/Sep/2026:05:11:06 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)" 35.231.172.211 - - [05/Sep/2026:05:14:36 +0000] "GET /.git/config HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 66.132.186.168 - - [05/Sep/2026:05:44:52 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 66.132.186.168 - - [05/Sep/2026:05:44:56 +0000] "GET /favicon.ico HTTP/1.1" 500 722 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 66.132.186.168 - - [05/Sep/2026:05:45:38 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 34.139.11.1 - - [05/Sep/2026:06:20:16 +0000] "GET /.git/config HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:06:48:47 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:06:48:47 +0000] "GET /wp-includes/ID3/index.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:06:48:48 +0000] "GET /wp-includes/fonts/ HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:06:48:48 +0000] "GET /wp/wp-admin/includes/ HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:06:48:49 +0000] "GET /wp-admin/admin-ajax.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:06:48:50 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:06:48:51 +0000] "GET /wp-admin/js/about.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:06:48:51 +0000] "GET /wp-admin/network/ HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:06:48:52 +0000] "GET /wp-includes/customize/ HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:06:48:53 +0000] "GET /WSO.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:06:48:54 +0000] "GET /wp-includes/css/ HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:06:48:55 +0000] "GET /templates/beez3/error.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 51.68.107.154 - - [05/Sep/2026:06:57:25 +0000] "GET /robots.txt HTTP/1.1" 500 722 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 20.198.7.31 - - [05/Sep/2026:07:04:27 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:07:04:27 +0000] "GET /wp-includes/ID3/index.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:07:04:28 +0000] "GET /wp-includes/fonts/ HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:07:22:16 +0000] "GET /.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:07:22:53 +0000] "GET /.env.local HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:07:23:25 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:07:23:29 +0000] "GET /.env.production HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:07:24:02 +0000] "GET /.git/HEAD HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:07:24:05 +0000] "GET /.env.production.local HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:07:24:06 +0000] "GET /.env.prod HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 136.112.68.82 - - [05/Sep/2026:07:26:05 +0000] "GET /.git/config HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:07:48:32 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:07:48:32 +0000] "GET /wp-includes/ID3/index.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:07:48:33 +0000] "GET /wp-includes/fonts/ HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:07:48:34 +0000] "GET /wp-admin/admin-ajax.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:07:53:17 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:07:53:17 +0000] "GET /wp-includes/ID3/index.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:07:53:18 +0000] "GET /wp-includes/fonts/ HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:07:53:19 +0000] "GET /wp/wp-admin/includes/ HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 199.45.154.62 - - [05/Sep/2026:08:02:34 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 199.45.154.62 - - [05/Sep/2026:08:03:28 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 34.171.139.134 - - [05/Sep/2026:08:31:45 +0000] "GET /.git/config HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 87.58.197.202 - - [05/Sep/2026:08:38:08 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 114.119.157.57 - - [05/Sep/2026:08:39:17 +0000] "GET /robots.txt HTTP/1.1" 500 722 "https://clicfinancement.com/robots.txt" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 195.178.110.22 - - [05/Sep/2026:08:39:31 +0000] "GET /backup.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:31 +0000] "GET /backup.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:31 +0000] "GET /backup.tar.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:32 +0000] "GET /backup.tgz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:32 +0000] "GET /backup.rar HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:33 +0000] "GET /backup.7z HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:33 +0000] "GET /backups.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:33 +0000] "GET /www.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:34 +0000] "GET /www.tar.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:34 +0000] "GET /wwwroot.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:35 +0000] "GET /wwwroot.tar.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:35 +0000] "GET /htdocs.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:35 +0000] "GET /htdocs.tar.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:36 +0000] "GET /public_html.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:36 +0000] "GET /public_html.tar.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:37 +0000] "GET /web.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:37 +0000] "GET /website.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:37 +0000] "GET /site.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:38 +0000] "GET /html.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:38 +0000] "GET /app.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:38 +0000] "GET /old.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:39 +0000] "GET /bak.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:39 +0000] "GET /data.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:40 +0000] "GET /backup.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:40 +0000] "GET /db.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:40 +0000] "GET /database.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:41 +0000] "GET /dump.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:41 +0000] "GET /db_backup.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:42 +0000] "GET /dbdump.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:42 +0000] "GET /mysql.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:42 +0000] "GET /mysqldump.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:43 +0000] "GET /data.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:43 +0000] "GET /users.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:44 +0000] "GET /www.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:44 +0000] "GET /site.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:44 +0000] "GET /sql.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:45 +0000] "GET /1.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:45 +0000] "GET /localhost.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:46 +0000] "GET /backup.sql.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:46 +0000] "GET /db.sql.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:46 +0000] "GET /dump.sql.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:47 +0000] "GET /database.sql.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:47 +0000] "GET /db_backup.sql.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:47 +0000] "GET /mysql.sql.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:48 +0000] "GET /database.sqlite HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:48 +0000] "GET /db.sqlite HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:49 +0000] "GET /backup.bak HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:49 +0000] "GET /db.bak HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:49 +0000] "GET /database.bak HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:50 +0000] "GET /data.bak HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:50 +0000] "GET /wp-content/uploads/dump.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:51 +0000] "GET /wp-content/uploads/backup.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:51 +0000] "GET /wp-content/uploads/database.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:51 +0000] "GET /wp-content/database.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:52 +0000] "GET /wp-content/mysql.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:52 +0000] "GET /backups/database.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:53 +0000] "GET /autodiscover.clicfinancement.com.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:53 +0000] "GET /autodiscover.clicfinancement.com.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:53 +0000] "GET /autodiscover.clicfinancement.com_db.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:54 +0000] "GET /autodiscover.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:54 +0000] "GET /autodiscover.tar.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:55 +0000] "GET /autodiscover.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:55 +0000] "GET /2026.zip HTTP/1.1" 400 52 "-" "-" 3.18.186.238 - - [05/Sep/2026:08:41:38 +0000] "GET / HTTP/1.1" 200 482 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:43:48 +0000] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:43:50 +0000] "GET /?rest_route=/gravitysmtp/v1/tests/mock-data&page=gravitysmtp-settings HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 45.148.10.13 - - [05/Sep/2026:08:43:52 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:43:52 +0000] "GET /livewire/update HTTP/1.1" 500 722 "-" "Mozilla/5.0" 45.148.10.13 - - [05/Sep/2026:08:43:52 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 45.148.10.13 - - [05/Sep/2026:08:43:52 +0000] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-connections HTTP/1.1" 500 722 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 45.148.10.13 - - [05/Sep/2026:08:44:02 +0000] "GET /?rest_route=/gravitysmtp/v1/tests/mock-data&page=gravitysmtp-connections HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 45.148.10.13 - - [05/Sep/2026:08:44:13 +0000] "GET /wp-json/gravitysmtp/v1/tests/mock-data HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Linux; Android 13; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:50:34 +0000] "POST /wp/index.php?rest_route=/batch/v1 HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:50:43 +0000] "POST /wp/index.php?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:50:47 +0000] "POST /wp/?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:50:47 +0000] "POST /wp/?rest_route=/batch%2Fv1 HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:50:59 +0000] "POST /wp/?rest_route=/batch/v1 HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:51:07 +0000] "POST /wp/wp-json/batch/v1 HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:51:11 +0000] "POST /wp/wp-json/Batch/v1 HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:51:19 +0000] "POST /wp//wp-json/batch/v1 HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:51:22 +0000] "POST /wp/wp-json/batch/v1/ HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:51:31 +0000] "POST /wp/blog/wp-json/batch/v1 HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:51:35 +0000] "POST /wp/wordpress/wp-json/batch/v1 HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:51:43 +0000] "POST /wp/index.php?rest_route=/batch/v1 HTTP/1.1" 500 722 "https://www.clicfinancement.techbala.com/wp/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:51:58 +0000] "POST /wp/index.php?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 500 722 "https://www.clicfinancement.techbala.com/wp/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:52:11 +0000] "POST /wp/?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 500 722 "https://www.clicfinancement.techbala.com/wp/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:52:23 +0000] "POST /wp/?rest_route=/batch%2Fv1 HTTP/1.1" 500 722 "https://www.clicfinancement.techbala.com/wp/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:52:35 +0000] "POST /wp/?rest_route=/batch/v1 HTTP/1.1" 500 722 "https://www.clicfinancement.techbala.com/wp/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:52:44 +0000] "POST /wp/wp-json/batch/v1 HTTP/1.1" 500 722 "https://www.clicfinancement.techbala.com/wp/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:52:49 +0000] "POST /wp/wp-json/Batch/v1 HTTP/1.1" 500 722 "https://www.clicfinancement.techbala.com/wp/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:52:57 +0000] "POST /wp//wp-json/batch/v1 HTTP/1.1" 500 722 "https://www.clicfinancement.techbala.com/wp/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:53:09 +0000] "POST /wp/wp-json/batch/v1/ HTTP/1.1" 500 722 "https://www.clicfinancement.techbala.com/wp/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.13 - - [05/Sep/2026:08:53:13 +0000] "POST /wp/blog/wp-json/batch/v1 HTTP/1.1" 500 722 "https://www.clicfinancement.techbala.com/wp/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 3.90.85.69 - - [05/Sep/2026:08:53:24 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (compatible; Konqueror/4.2; Linux) KHTML/4.2.4 (like Gecko) Slackware/13.0" 20.151.10.161 - - [05/Sep/2026:08:55:29 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:29 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /f35.update.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /adminfuns.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /4PJcpMFsD8B.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /av.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /dex.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /chosen.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /1.php?p= HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /radio.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /blacks.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /run.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /vpn.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /alfa.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /wp-content/uploads/ HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /w.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /wp_blog_footer.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /robot.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /sss.php?p= HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /or.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /b8.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /xex.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /CAE-2.5.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /ass.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /felnggg.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /felnggg.update.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /jybkxer.php HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /edit-tags.php?p= HTTP/1.1" 404 5749 "-" "-" 20.151.10.161 - - [05/Sep/2026:08:55:30 +0000] "GET /nauik.php HTTP/1.1" 404 5749 "-" "-" 45.148.10.67 - - [05/Sep/2026:08:58:39 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:08:59:14 +0000] "GET /.git/HEAD HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:08:59:14 +0000] "GET /.env.production HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:08:59:55 +0000] "GET /.env.production.local HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:08:59:57 +0000] "GET /.env HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:08:59:57 +0000] "GET /.env.local HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [05/Sep/2026:09:00:33 +0000] "GET /.env.staging HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 138.246.253.24 - - [05/Sep/2026:09:10:21 +0000] "GET /robots.txt HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 87.58.197.202 - - [05/Sep/2026:09:12:45 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 51.68.236.95 - - [05/Sep/2026:09:24:17 +0000] "GET /robots.txt HTTP/1.1" 500 722 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 20.198.7.31 - - [05/Sep/2026:09:25:40 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 34.60.163.72 - - [05/Sep/2026:09:36:33 +0000] "GET /.git/config HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:43:44 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:43:44 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 500 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:43:45 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:43:47 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 500 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:43:48 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:43:49 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 500 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:43:50 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:43:50 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 500 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:43:51 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 500 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:43:52 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:43:53 +0000] "POST /index.php HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:43:53 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:43:55 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:43:55 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 500 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:43:56 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 500 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:43:57 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:43:58 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:43:59 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 500 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:44:00 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 500 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:44:01 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 500 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:44:03 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 500 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:44:04 +0000] "GET /?wpcb0ad9fd80 HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:44:04 +0000] "GET /?wpcb0ad9fd80 HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:44:04 +0000] "GET /feed/?wpcb0ad9fd80 HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 151.123.177.42 - - [05/Sep/2026:09:44:05 +0000] "GET /readme.html?wpcb0ad9fd80 HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 44.215.105.197 - - [05/Sep/2026:10:04:23 +0000] "POST / HTTP/1.1" 500 - "https://www.clicfinancement.techbala.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 85.102.42.236 - - [05/Sep/2026:10:07:25 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:129.0) Gecko/20100101 Firefox/129.0" 167.99.144.228 - - [05/Sep/2026:10:10:37 +0000] "GET /.git/config HTTP/1.1" 500 722 "-" "libwww-perl/5.820" 20.214.149.209 - - [05/Sep/2026:10:10:56 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 106.75.141.146 - - [05/Sep/2026:10:21:56 +0000] "GET / HTTP/1.1" 401 36 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" 106.75.141.146 - - [05/Sep/2026:10:22:02 +0000] "GET /favicon.ico HTTP/1.1" 401 36 "https://cpcalendars.clicfinancement.com" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" 106.75.174.40 - - [05/Sep/2026:10:27:54 +0000] "GET / HTTP/1.1" 401 36 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" 106.75.174.40 - - [05/Sep/2026:10:28:00 +0000] "GET /favicon.ico HTTP/1.1" 401 36 "https://cpcalendars.clicfinancement.com" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" 185.218.86.3 - - [05/Sep/2026:11:04:38 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 20.194.2.112 - - [05/Sep/2026:11:06:08 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:11:06:37 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 107.189.6.149 - - [05/Sep/2026:11:26:26 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" 107.189.6.149 - - [05/Sep/2026:11:26:58 +0000] "GET /?rest_route=/ HTTP/1.1" 200 482 "http://www.google.com.hk" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" 107.189.6.149 - - [05/Sep/2026:11:26:59 +0000] "GET /plugins/editors/jce/jce.xml HTTP/1.1" 500 722 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 107.189.6.149 - - [05/Sep/2026:11:26:59 +0000] "GET /administrator/components/com_jce/ HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" 107.189.6.149 - - [05/Sep/2026:11:27:00 +0000] "GET /media/system/js/core.js HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 107.189.6.149 - - [05/Sep/2026:11:27:00 +0000] "GET /media/jui/js/bootstrap.min.js HTTP/1.1" 500 722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" 107.189.6.149 - - [05/Sep/2026:11:27:01 +0000] "GET /media/vendor/jquery/js/jquery.min.js?3.6.0 HTTP/1.1" 500 722 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 107.189.6.149 - - [05/Sep/2026:11:27:01 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 107.189.6.149 - - [05/Sep/2026:11:27:02 +0000] "POST /wp-admin/admin-ajax.php?action=updraft_central_ajaxcallback HTTP/1.1" 500 722 "-" "python-requests/2.34.2" 107.189.6.149 - - [05/Sep/2026:11:27:04 +0000] "GET /wp-content/plugins/wp_blxtkwo/wp_blxtkwo.php HTTP/1.1" 500 722 "-" "python-requests/2.34.2" 107.189.6.149 - - [05/Sep/2026:11:27:05 +0000] "GET /wp-content/plugins/wp_blxtkwo/wp_blxtkwo.php HTTP/1.1" 500 722 "-" "python-requests/2.34.2" 107.189.6.149 - - [05/Sep/2026:11:27:07 +0000] "GET /wp-content/plugins/wp_blxtkwo/wp_blxtkwo.php HTTP/1.1" 500 722 "-" "python-requests/2.34.2" 107.189.6.149 - - [05/Sep/2026:11:27:08 +0000] "GET /wp-content/plugins/wp_blxtkwo/wp_blxtkwo.php HTTP/1.1" 500 722 "-" "python-requests/2.34.2" 107.189.6.149 - - [05/Sep/2026:11:27:09 +0000] "GET /wp-content/plugins/wp_blxtkwo/wp_blxtkwo.php HTTP/1.1" 500 722 "-" "python-requests/2.34.2"