/
var
/
log
/
apache2
/
domlogs
/
techb158
/
/var/log/apache2/domlogs/techb158
mkdir
upload
Name
Size
Mode
Actions
abdallabala.techbala.com
23027223
0640
edit
dl
rm
abdallabala.techbala.com-ssl_log
47204599
0640
edit
dl
rm
aleamaralawal.com.techbala.com
14394
0640
edit
dl
rm
aleamaralawal.com.techbala.com-ssl_log
133258
0640
edit
dl
rm
bala.techbala.ca
0
0640
edit
dl
rm
bala.techbala.ca-ssl_log
411
0640
edit
dl
rm
bala.techbala.com
0
0640
edit
dl
rm
bala.techbala.com-ssl_log
0
0640
edit
dl
rm
balacoffee.com.techbala.com
11593
0640
edit
dl
rm
balacoffee.com.techbala.com-ssl_log
109086
0640
edit
dl
rm
balacoffees.techbala.com
0
0640
edit
dl
rm
balacoffees.techbala.com-ssl_log
0
0640
edit
dl
rm
balagrouptechnologies.techbala.com
0
0640
edit
dl
rm
balagrouptechnologies.techbala.com-ssl_log
0
0640
edit
dl
rm
belady-ly.techbala.com
0
0640
edit
dl
rm
belady-ly.techbala.com-ssl_log
0
0640
edit
dl
rm
beladygroup.techbala.com
0
0640
edit
dl
rm
beladygroup.techbala.com-ssl_log
0
0640
edit
dl
rm
carlosbeauregard.techbala.com
0
0640
edit
dl
rm
carlosbeauregard.techbala.com-ssl_log
0
0640
edit
dl
rm
charismaticmovers.techbala.com
6281
0640
edit
dl
rm
charismaticmovers.techbala.com-ssl_log
762
0640
edit
dl
rm
chatmaster.techbala.com
0
0640
edit
dl
rm
chatmaster.techbala.com-ssl_log
0
0640
edit
dl
rm
christophe-lesage.techbala.com
808
0640
edit
dl
rm
christophe-lesage.techbala.com-ssl_log
0
0640
edit
dl
rm
clicfinancement.techbala.com
20568
0640
edit
dl
rm
clicfinancement.techbala.com-ssl_log
172236
0640
edit
dl
rm
clicfinancementca.techbala.com
26142
0640
edit
dl
rm
clicfinancementca.techbala.com-ssl_log
272894
0640
edit
dl
rm
convergencesoft.ca.techbala.com
31159
0640
edit
dl
rm
convergencesoft.ca.techbala.com-ssl_log
77432
0640
edit
dl
rm
convergencesoft.techbala.com
30964
0640
edit
dl
rm
convergencesoft.techbala.com-ssl_log
165007
0640
edit
dl
rm
courtiersnetelite.techbala.com
0
0640
edit
dl
rm
courtiersnetelite.techbala.com-ssl_log
0
0640
edit
dl
rm
courtiersneteliteca.techbala.com
0
0640
edit
dl
rm
courtiersneteliteca.techbala.com-ssl_log
0
0640
edit
dl
rm
dany.techbala.com
0
0640
edit
dl
rm
dany.techbala.com-ssl_log
0
0640
edit
dl
rm
dev.aleamaralawal.com
8884
0640
edit
dl
rm
dev.aleamaralawal.com-ssl_log
16080
0640
edit
dl
rm
dev.balacoffee.com
40247899
0640
edit
dl
rm
dev.balacoffee.com-ssl_log
14461760
0640
edit
dl
rm
dlcrate.techbala.com
0
0640
edit
dl
rm
dlcrate.techbala.com-ssl_log
0
0640
edit
dl
rm
dominion.techbala.com
0
0640
edit
dl
rm
dominion.techbala.com-ssl_log
0
0640
edit
dl
rm
dominionbranch.techbala.com
0
0640
edit
dl
rm
dominionbranch.techbala.com-ssl_log
0
0640
edit
dl
rm
dominionhypothecairesca.techbala.com
0
0640
edit
dl
rm
dominionhypothecairesca.techbala.com-ssl_log
0
0640
edit
dl
rm
dominionhypothecairescom.techbala.com
0
0640
edit
dl
rm
dominionhypothecairescom.techbala.com-ssl_log
0
0640
edit
dl
rm
dominionlendingbranch.techbala.com
0
0640
edit
dl
rm
dominionlendingbranch.techbala.com-ssl_log
0
0640
edit
dl
rm
equipeballaro.techbala.com
0
0640
edit
dl
rm
equipeballaro.techbala.com-ssl_log
0
0640
edit
dl
rm
equipeballaroca.techbala.com
0
0640
edit
dl
rm
equipeballaroca.techbala.com-ssl_log
0
0640
edit
dl
rm
eshop.techbala.com
0
0640
edit
dl
rm
eshop.techbala.com-ssl_log
0
0640
edit
dl
rm
ex.abdallabala.com
0
0640
edit
dl
rm
ex.abdallabala.com-ssl_log
0
0640
edit
dl
rm
ex.techbala.com
0
0640
edit
dl
rm
ex.techbala.com-ssl_log
412
0640
edit
dl
rm
exp.abdallabala.com
296643
0640
edit
dl
rm
exp.abdallabala.com-ssl_log
5034
0640
edit
dl
rm
expense.abdallabala.com
0
0640
edit
dl
rm
expense.abdallabala.com-ssl_log
455
0640
edit
dl
rm
family.techbala.com
0
0640
edit
dl
rm
family.techbala.com-ssl_log
0
0640
edit
dl
rm
financementhypotheque.com.techbala.com
0
0640
edit
dl
rm
financementhypotheque.com.techbala.com-ssl_log
0
0640
edit
dl
rm
francisgallanthypotheque.techbala.com
3299
0640
edit
dl
rm
francisgallanthypotheque.techbala.com-ssl_log
14537
0640
edit
dl
rm
frantzihypotheque.techbala.com
10660
0640
edit
dl
rm
frantzihypotheque.techbala.com-ssl_log
79411
0640
edit
dl
rm
geodominion.techbala.com
0
0640
edit
dl
rm
geodominion.techbala.com-ssl_log
0
0640
edit
dl
rm
gfelite.techbala.com
0
0640
edit
dl
rm
gfelite.techbala.com-ssl_log
0
0640
edit
dl
rm
groupetransit.techbala.com
0
0640
edit
dl
rm
groupetransit.techbala.com-ssl_log
0
0640
edit
dl
rm
hypotheque-pret.techbala.com
0
0640
edit
dl
rm
hypotheque-pret.techbala.com-ssl_log
0
0640
edit
dl
rm
hypothequecenter.techbala.com
0
0640
edit
dl
rm
hypothequecenter.techbala.com-ssl_log
0
0640
edit
dl
rm
hypothequechristinelemieux.techbala.com
2514
0640
edit
dl
rm
hypothequechristinelemieux.techbala.com-ssl_log
43579
0640
edit
dl
rm
hypothequemultilogement.techbala.com
0
0640
edit
dl
rm
hypothequemultilogement.techbala.com-ssl_log
0
0640
edit
dl
rm
hypothequephenix.techbala.com
66406
0640
edit
dl
rm
hypothequephenix.techbala.com-ssl_log
131623
0640
edit
dl
rm
hypothequepretweb.techbala.com
0
0640
edit
dl
rm
hypothequepretweb.techbala.com-ssl_log
0
0640
edit
dl
rm
hypothequesanssoucis.techbala.com
0
0640
edit
dl
rm
hypothequesanssoucis.techbala.com-ssl_log
0
0640
edit
dl
rm
hypothequetoimieux.techbala.com
10788
0640
edit
dl
rm
hypothequetoimieux.techbala.com-ssl_log
22711
0640
edit
dl
rm
ictcreations.ca.techbala.com
0
0640
edit
dl
rm
ictcreations.ca.techbala.com-ssl_log
0
0640
edit
dl
rm
ictcreations.techbala.com
0
0640
edit
dl
rm
ictcreations.techbala.com-ssl_log
0
0640
edit
dl
rm
ileadtechnologies.techbala.com
22793
0640
edit
dl
rm
ileadtechnologies.techbala.com-ssl_log
225903
0640
edit
dl
rm
ileadtechnology.com.techbala.com
31368
0640
edit
dl
rm
ileadtechnology.com.techbala.com-ssl_log
385200
0640
edit
dl
rm
immovalet.ca.techbala.com
10237500
0640
edit
dl
rm
immovalet.ca.techbala.com-ssl_log
9397157
0640
edit
dl
rm
immovalet.techbala.com
84942549
0640
edit
dl
rm
immovalet.techbala.com-ssl_log
47972909
0640
edit
dl
rm
immovaletca.techbala.com
0
0640
edit
dl
rm
immovaletca.techbala.com-ssl_log
0
0640
edit
dl
rm
l2hypotheques.com.techbala.com
372990
0640
edit
dl
rm
l2hypotheques.com.techbala.com-ssl_log
562193
0640
edit
dl
rm
landingpage.techbala.com
0
0640
edit
dl
rm
landingpage.techbala.com-ssl_log
0
0640
edit
dl
rm
lazrqlojistik.com.techbala.com
288643560
0640
edit
dl
rm
lazrqlojistik.com.techbala.com-ssl_log
15713482
0640
edit
dl
rm
loginsystem.techbala.com
0
0640
edit
dl
rm
loginsystem.techbala.com-ssl_log
0
0640
edit
dl
rm
longwaymovingexperts.com.techbala.com
0
0640
edit
dl
rm
longwaymovingexperts.com.techbala.com-ssl_log
0
0640
edit
dl
rm
marinamendeleva.techbala.com
3333
0640
edit
dl
rm
marinamendeleva.techbala.com-ssl_log
5889
0640
edit
dl
rm
masuccursale.clicfinancement.com
0
0640
edit
dl
rm
masuccursale.clicfinancement.com-ssl_log
0
0640
edit
dl
rm
masuccursale.techbala.com
0
0640
edit
dl
rm
masuccursale.techbala.com-ssl_log
0
0640
edit
dl
rm
masuccursaledominion.techbala.com
0
0640
edit
dl
rm
masuccursaledominion.techbala.com-ssl_log
0
0640
edit
dl
rm
masuccursaledominionca.techbala.com
320
0640
edit
dl
rm
masuccursaledominionca.techbala.com-ssl_log
0
0640
edit
dl
rm
matthieust-laurent.techbala.com
3198
0640
edit
dl
rm
matthieust-laurent.techbala.com-ssl_log
7444
0640
edit
dl
rm
maxautos.techbala.com
13576
0640
edit
dl
rm
maxautos.techbala.com-ssl_log
10772
0640
edit
dl
rm
metroimmobilier.techbala.com
0
0640
edit
dl
rm
metroimmobilier.techbala.com-ssl_log
0
0640
edit
dl
rm
metroimmobilierca.techbala.com
0
0640
edit
dl
rm
metroimmobilierca.techbala.com-ssl_log
0
0640
edit
dl
rm
monphenix.techbala.com
131257584
0640
edit
dl
rm
monphenix.techbala.com-ssl_log
297633893
0640
edit
dl
rm
monphenixcs.techbala.com
340527809
0640
edit
dl
rm
monphenixcs.techbala.com-ssl_log
77946804
0640
edit
dl
rm
multilogementsclub.techbala.com
0
0640
edit
dl
rm
multilogementsclub.techbala.com-ssl_log
0
0640
edit
dl
rm
my.techbala.com
264479
0640
edit
dl
rm
my.techbala.com-ssl_log
192717
0640
edit
dl
rm
mydoiniontest.techbala.com
0
0640
edit
dl
rm
mydoiniontest.techbala.com-ssl_log
0
0640
edit
dl
rm
mydominionbranch.techbala.com
0
0640
edit
dl
rm
mydominionbranch.techbala.com-ssl_log
0
0640
edit
dl
rm
mydominionbranchca.techbala.com
0
0640
edit
dl
rm
mydominionbranchca.techbala.com-ssl_log
0
0640
edit
dl
rm
myrate.techbala.com
0
0640
edit
dl
rm
myrate.techbala.com-ssl_log
0
0640
edit
dl
rm
myratebid.techbala.com
4889
0640
edit
dl
rm
myratebid.techbala.com-ssl_log
252794
0640
edit
dl
rm
myreport.techbala.com
0
0640
edit
dl
rm
myreport.techbala.com-ssl_log
0
0640
edit
dl
rm
mytest.techbala.com
0
0640
edit
dl
rm
mytest.techbala.com-ssl_log
0
0640
edit
dl
rm
mytradingreport.techbala.com
0
0640
edit
dl
rm
mytradingreport.techbala.com-ssl_log
0
0640
edit
dl
rm
myweb.techbala.com
0
0640
edit
dl
rm
myweb.techbala.com-ssl_log
0
0640
edit
dl
rm
n8n.abdallabala.com
0
0640
edit
dl
rm
n8n.abdallabala.com-ssl_log
0
0640
edit
dl
rm
n8n.ileadtechnology.com
218
0640
edit
dl
rm
n8n.ileadtechnology.com-ssl_log
960
0640
edit
dl
rm
nathalielegerhypotheque.techbala.com
2962
0640
edit
dl
rm
nathalielegerhypotheque.techbala.com-ssl_log
21957
0640
edit
dl
rm
newlocation.techbala.com
0
0640
edit
dl
rm
newlocation.techbala.com-ssl_log
0
0640
edit
dl
rm
newmap.techbala.com
0
0640
edit
dl
rm
newmap.techbala.com-ssl_log
0
0640
edit
dl
rm
newmyratebid.techbala.com
0
0640
edit
dl
rm
newmyratebid.techbala.com-ssl_log
0
0640
edit
dl
rm
on-time-movers.com.techbala.com
44207127
0640
edit
dl
rm
on-time-movers.com.techbala.com-ssl_log
3564990
0640
edit
dl
rm
on-time-movers.techbala.com
0
0640
edit
dl
rm
on-time-movers.techbala.com-ssl_log
0
0640
edit
dl
rm
pierredewolffinance.techbala.com
0
0640
edit
dl
rm
pierredewolffinance.techbala.com-ssl_log
0
0640
edit
dl
rm
placechurchill.techbala.com
0
0640
edit
dl
rm
placechurchill.techbala.com-ssl_log
0
0640
edit
dl
rm
placechurchillca.techbala.com
0
0640
edit
dl
rm
placechurchillca.techbala.com-ssl_log
0
0640
edit
dl
rm
pneus-parfait.techbala.com
0
0640
edit
dl
rm
pneus-parfait.techbala.com-ssl_log
0
0640
edit
dl
rm
pneusparfait.com.techbala.com
41107
0640
edit
dl
rm
pneusparfait.com.techbala.com-ssl_log
10630
0640
edit
dl
rm
polimedica-tr.techbala.com
0
0640
edit
dl
rm
polimedica-tr.techbala.com-ssl_log
0
0640
edit
dl
rm
pret-hypothecaire-laval.com.techbala.com
0
0640
edit
dl
rm
pret-hypothecaire-laval.com.techbala.com-ssl_log
0
0640
edit
dl
rm
pret-hypothecaire-montreal.com.techbala.com
0
0640
edit
dl
rm
pret-hypothecaire-montreal.com.techbala.com-ssl_log
0
0640
edit
dl
rm
prets-hypotheque-dominion.techbala.com
0
0640
edit
dl
rm
prets-hypotheque-dominion.techbala.com-ssl_log
0
0640
edit
dl
rm
prets-hypothequefrancineperrier-ca.techbala.com
0
0640
edit
dl
rm
prets-hypothequefrancineperrier-ca.techbala.com-ssl_log
0
0640
edit
dl
rm
prets-hypothequefrancineperrier.techbala.com
0
0640
edit
dl
rm
prets-hypothequefrancineperrier.techbala.com-ssl_log
0
0640
edit
dl
rm
prets-hypotheques-quebec.com.techbala.com
0
0640
edit
dl
rm
prets-hypotheques-quebec.com.techbala.com-ssl_log
0
0640
edit
dl
rm
pretshypothequecom.techbala.com
0
0640
edit
dl
rm
pretshypothequecom.techbala.com-ssl_log
0
0640
edit
dl
rm
primomovers.techbala.com
20976238
0640
edit
dl
rm
primomovers.techbala.com-ssl_log
211180
0640
edit
dl
rm
primomoversca.techbala.com
46802
0640
edit
dl
rm
primomoversca.techbala.com-ssl_log
1204719
0640
edit
dl
rm
report.techbala.com
0
0640
edit
dl
rm
report.techbala.com-ssl_log
0
0640
edit
dl
rm
secondlend.techbala.com
0
0640
edit
dl
rm
secondlend.techbala.com-ssl_log
0
0640
edit
dl
rm
sharing.techbala.com
0
0640
edit
dl
rm
sharing.techbala.com-ssl_log
0
0640
edit
dl
rm
skinny-movers.techbala.com
0
0640
edit
dl
rm
skinny-movers.techbala.com-ssl_log
0
0640
edit
dl
rm
solutionshypotheque.techbala.com
70037
0640
edit
dl
rm
solutionshypotheque.techbala.com-ssl_log
104131
0640
edit
dl
rm
ssl.techbala.com
0
0640
edit
dl
rm
ssl.techbala.com-ssl_log
0
0640
edit
dl
rm
subroot.techbala.com
0
0640
edit
dl
rm
subroot.techbala.com-ssl_log
0
0640
edit
dl
rm
sum.myreport.techbala.com
0
0640
edit
dl
rm
sum.myreport.techbala.com-ssl_log
0
0640
edit
dl
rm
sum.techbala.com
0
0640
edit
dl
rm
sum.techbala.com-ssl_log
158
0640
edit
dl
rm
sumtest.techbala.com
0
0640
edit
dl
rm
sumtest.techbala.com-ssl_log
0
0640
edit
dl
rm
sumtradingreports.techbala.com
0
0640
edit
dl
rm
sumtradingreports.techbala.com-ssl_log
0
0640
edit
dl
rm
techbala.ca.techbala.com
258843600
0640
edit
dl
rm
techbala.ca.techbala.com-ssl_log
7733380
0640
edit
dl
rm
techbala.com
1358406
0640
edit
dl
rm
techbala.com-ssl_log
93619411
0640
edit
dl
rm
techbala.techbala.com
7913
0640
edit
dl
rm
techbala.techbala.com-ssl_log
22589
0640
edit
dl
rm
test.techbala.com
0
0640
edit
dl
rm
test.techbala.com-ssl_log
414
0640
edit
dl
rm
testbala.techbala.com
0
0640
edit
dl
rm
testbala.techbala.com-ssl_log
0
0640
edit
dl
rm
trend.techbala.com
0
0640
edit
dl
rm
trend.techbala.com-ssl_log
0
0640
edit
dl
rm
trendlyall.techbala.com
0
0640
edit
dl
rm
trendlyall.techbala.com-ssl_log
0
0640
edit
dl
rm
unehypotheque.techbala.com
0
0640
edit
dl
rm
unehypotheque.techbala.com-ssl_log
0
0640
edit
dl
rm
upload.abdallabala.com
0
0640
edit
dl
rm
upload.abdallabala.com-ssl_log
0
0640
edit
dl
rm
uploadmetro.techbala.com
0
0640
edit
dl
rm
uploadmetro.techbala.com-ssl_log
0
0640
edit
dl
rm
valet.immovalet.com
0
0640
edit
dl
rm
valet.immovalet.com-ssl_log
0
0640
edit
dl
rm
valet.techbala.com
0
0640
edit
dl
rm
valet.techbala.com-ssl_log
0
0640
edit
dl
rm
valetm.techbala.com
0
0640
edit
dl
rm
valetm.techbala.com-ssl_log
0
0640
edit
dl
rm
votresuccursale.ca.techbala.com
0
0640
edit
dl
rm
votresuccursale.ca.techbala.com-ssl_log
0
0640
edit
dl
rm
votresuccursale.techbala.com
0
0640
edit
dl
rm
votresuccursale.techbala.com-ssl_log
0
0640
edit
dl
rm
votresuccursalehypothecaireca.techbala.com
0
0640
edit
dl
rm
votresuccursalehypothecaireca.techbala.com-ssl_log
0
0640
edit
dl
rm
votresuccursalehypothecairecom.techbala.com
0
0640
edit
dl
rm
votresuccursalehypothecairecom.techbala.com-ssl_log
0
0640
edit
dl
rm
wafertraining.techbala.com
0
0640
edit
dl
rm
wafertraining.techbala.com-ssl_log
0
0640
edit
dl
rm
web.techbala.com
0
0640
edit
dl
rm
web.techbala.com-ssl_log
413
0640
edit
dl
rm
workloadmatch.techbala.com
21517
0640
edit
dl
rm
workloadmatch.techbala.com-ssl_log
361179
0640
edit
dl
rm
_wildcard_.techbala.com
269615
0640
edit
dl
rm
_wildcard_.techbala.com-ssl_log
3094524
0640
edit
dl
rm
Edit:
/var/log/apache2/domlogs/techb158/clicfinancementca.techbala.com-ssl_log
(272894B)
104.238.222.26 - - [04/Sep/2026:12:09:20 +0000] "GET /wp-login.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 104.238.222.26 - - [04/Sep/2026:12:09:22 +0000] "GET /wp-admin/ HTTP/1.1" 500 724 "https://wordpress.org/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.246.253.24 - - [04/Sep/2026:12:41:17 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 44.195.30.193 - - [04/Sep/2026:13:04:19 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 216.73.216.203 - - [04/Sep/2026:13:04:42 +0000] "GET /robots.txt HTTP/1.1" 200 26 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 34.34.146.77 - - [04/Sep/2026:13:05:51 +0000] "GET / HTTP/1.1" 200 39880 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.34.146.77 - - [04/Sep/2026:13:07:30 +0000] "GET /unprotected/json-minified.js HTTP/1.1" 200 1562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.34.146.77 - - [04/Sep/2026:13:07:30 +0000] "GET /unprotected/json-minified.js.map HTTP/1.1" 500 796 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 161.115.234.177 - - [04/Sep/2026:13:11:10 +0000] "GET / HTTP/1.1" 200 482 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 Edg/99.0.1150.30" 121.91.86.77 - - [04/Sep/2026:13:15:39 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 121.91.86.77 - - [04/Sep/2026:13:15:40 +0000] "GET /ads.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 205.210.31.214 - - [04/Sep/2026:13:18:10 +0000] "GET / HTTP/1.1" 200 40068 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.prod HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.local HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /_ignition/health-check HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.backup HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.save HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /wp-config.php.bak HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.example HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /wp-config.php.swp HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /env HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.old HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /storage/logs/laravel.log HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.production HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /actuator/configprops HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /crusader-404-probe HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /actuator/env HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.dev HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /.env.bak HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 35.200.193.179 - - [04/Sep/2026:13:20:05 +0000] "GET /wp-config.php~ HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.production HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.save HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.local HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.old HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.dev HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.example HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.bak HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /wp-config.php~ HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /storage/logs/laravel.log HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /actuator/configprops HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /_ignition/health-check HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /wp-config.php.swp HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.prod HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /actuator/env HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /crusader-404-probe HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /env HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /.env.backup HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 34.100.217.185 - - [04/Sep/2026:13:20:32 +0000] "GET /wp-config.php.bak HTTP/1.1" 500 724 "-" "crusader-worker/1.0" 54.234.120.76 - - [04/Sep/2026:13:52:30 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 18.159.96.7 - - [04/Sep/2026:13:53:42 +0000] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; DefaultsExposed/1.0; +https://defaults.exposed/headers)" 20.151.10.161 - - [04/Sep/2026:13:56:26 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:26 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:26 +0000] "GET /ba.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:26 +0000] "GET /great.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:26 +0000] "GET /dyt8mjxc3yofbkoriukvgjaCdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:26 +0000] "GET /robots.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /sky.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /k.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /w.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /FWAZ.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /blurbs.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /ccc.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /images.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /alls.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /red.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /admin.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /file52.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /geck.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /biufile.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /dejavu.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /aaf.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /h02ugyh.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /155.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /ops.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:27 +0000] "GET /mac.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /makeasmtp.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /pucci.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /puc.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /8.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /1.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /admin.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /edit.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /inputs.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /av.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /classwithtostring.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /adminfuns.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:28 +0000] "GET /ms-edit.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /222.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /BDKR28WP.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /wp.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /abcd.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /simple.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /chosen.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /als.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /file65.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /admin.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /bless.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /f35.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /aaa.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:29 +0000] "GET /gecko.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /xiugai.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /adminner.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /inx.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /11.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /File.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /a3ampzmbipnkpxeqhqpsanCdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /4PJcpMFsD8B.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /i99z7zzbwtpteujvv6s8hiCdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /gwaih1gfzp5vuwr04Cdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /1wvekeybd9it2di2vyipgr6Cdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /media.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /inso.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /shiny.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:30 +0000] "GET /403dd.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /baba.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /site.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /cabs.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /insc.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /file.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /dex.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /key.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /kir.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /nofile.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /fling.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /btyuio.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /or.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:31 +0000] "GET /mails.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /sm.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /araso.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /a.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /sb.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-content/index.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-includes/ID3/about.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-admin/css/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-includes/blocks/details/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-includes/blocks/audio/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-temp.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-admin/js/index.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:32 +0000] "GET /wp-includes/Requests/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-content/admin.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /av.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-goods.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-includes/js/jquery/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /cgi-bin/index.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-includes/l10n/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-manager.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /cgi-bin/admin.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:33 +0000] "GET /wp-content/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp-includes/block-bindings/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp-includes/assets/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp-admin/network/plugins.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp-admin/maint/index.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /qazwsx.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /cae2.2.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /b8.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /xs.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp-content/uploads/ HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /wp_blog_footer.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /billzgs.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /CAE-2.5.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:34 +0000] "GET /0.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /v4on3fxtoo5z5cq0yCdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /8xmlr9ommwdy3ro8dCdefault.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /fms.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /0day.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /das.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /wss.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /fw.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /waa.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /By4mzbsowFX.php HTTP/1.1" 401 36 "-" "-" 20.151.10.161 - - [04/Sep/2026:13:56:35 +0000] "GET /selrfiem.php HTTP/1.1" 401 36 "-" "-" 87.58.197.202 - - [04/Sep/2026:14:13:49 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 80.94.92.175 - - [04/Sep/2026:14:16:28 +0000] "GET /.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 103.160.172.244 - - [04/Sep/2026:14:48:26 +0000] "POST /xmlrpc.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.0.0 Safari/537.36" 3.18.186.238 - - [04/Sep/2026:14:49:44 +0000] "GET / HTTP/1.1" 200 482 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 198.235.24.133 - - [04/Sep/2026:14:57:53 +0000] "GET / HTTP/1.1" 401 36 "http://cpcontacts.clicfinancement.ca/" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 87.58.197.202 - - [04/Sep/2026:15:06:54 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.dev HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.example HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.bak HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.prod HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.local HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /actuator/env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /crusader-404-probe HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /wp-config.php.swp HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.backup HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.production HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /actuator/configprops HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.old HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /.env.save HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /storage/logs/laravel.log HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /_ignition/health-check HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /wp-config.php~ HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:43 +0000] "GET /wp-config.php.bak HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:54 +0000] "GET /.env. HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:54 +0000] "GET / HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:54 +0000] "GET /.ENV HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:54 +0000] "GET /.env/ HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:54 +0000] "GET //.env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:54 +0000] "GET /%2eenv HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.87.141.188 - - [04/Sep/2026:15:18:54 +0000] "GET /.env;.png HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.backup HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /wp-config.php.swp HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.production HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.bak HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /wp-config.php~ HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /_ignition/health-check HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /wp-config.php.bak HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.example HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.prod HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.old HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /storage/logs/laravel.log HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.local HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /crusader-404-probe HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.save HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /.env.dev HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /actuator/env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:22 +0000] "GET /actuator/configprops HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:32 +0000] "GET /.env/ HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:32 +0000] "GET / HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:32 +0000] "GET //.env HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:32 +0000] "GET /%2eenv HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:32 +0000] "GET /.ENV HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:32 +0000] "GET /.env. HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 34.53.130.132 - - [04/Sep/2026:15:20:32 +0000] "GET /.env;.png HTTP/1.1" 401 36 "-" "crusader-worker/1.0" 104.152.52.120 - - [04/Sep/2026:15:23:31 +0000] "GET / HTTP/1.1" 200 482 "-" "curl/7.61.1" 104.152.52.120 - - [04/Sep/2026:15:23:31 +0000] "GET /favicon.ico HTTP/1.1" 500 724 "-" "curl/7.61.1" 216.73.216.203 - - [04/Sep/2026:15:38:22 +0000] "GET /robots.txt HTTP/1.1" 200 26 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /public/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /htdocs/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /src/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /www/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /html/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /wordpress/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /backend/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /api/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /app/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /var/www/.git/config HTTP/1.1" 404 5749 "-" "crusader-worker/1.0" 35.196.218.247 - - [04/Sep/2026:15:43:44 +0000] "GET /site/.git/config HTTP/1.1" 502 5318 "-" "crusader-worker/1.0" 52.90.150.115 - - [04/Sep/2026:15:52:50 +0000] "POST / HTTP/1.1" 500 - "https://clicfinancementca.techbala.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 85.208.96.207 - - [04/Sep/2026:15:58:36 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)" 104.208.72.93 - - [04/Sep/2026:15:58:41 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.170.167.18 - - [04/Sep/2026:15:58:45 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (compatible; BacklinksExtendedBot)" 20.214.149.209 - - [04/Sep/2026:16:00:39 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 44.195.30.193 - - [04/Sep/2026:16:21:11 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:43 +0000] "GET / HTTP/1.1" 200 12490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:45 +0000] "GET /autoload_classmap.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:45 +0000] "GET /post.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:45 +0000] "GET /1.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:45 +0000] "GET /flower.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:45 +0000] "GET /admin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:46 +0000] "GET /file.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:46 +0000] "GET /meta.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:46 +0000] "GET /index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:46 +0000] "GET /abcd.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:47 +0000] "GET /about.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:47 +0000] "GET /randkeyword.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:47 +0000] "GET /goods.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:47 +0000] "GET /hehe.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:47 +0000] "GET /user.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:48 +0000] "GET /wp-2019.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:48 +0000] "GET /chosen.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:48 +0000] "GET /functions.phpA HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:48 +0000] "GET /cron.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:48 +0000] "GET /edit.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:49 +0000] "GET /gecko-new.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:49 +0000] "GET /cookie.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:49 +0000] "GET /xleet.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:49 +0000] "GET /spip.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:50 +0000] "GET /22.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:50 +0000] "GET /room.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:50 +0000] "GET /disagreed.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:50 +0000] "GET /text.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:50 +0000] "GET /alfa-rex.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:51 +0000] "GET /alfa-rex.php7 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:51 +0000] "GET /feeds.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:51 +0000] "GET /radio.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:51 +0000] "GET /dropdown.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:52 +0000] "GET /defaults.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:52 +0000] "GET /system.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:52 +0000] "GET /xmlrpc.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:52 +0000] "GET /xmlrpc.php0 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:52 +0000] "GET /colors.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:53 +0000] "GET /updates.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:53 +0000] "GET /alfa-rex1.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:53 +0000] "GET /wp-index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:53 +0000] "GET /wp-admin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:53 +0000] "GET /alfa.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:54 +0000] "GET /alfanew.php7 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:54 +0000] "GET /locale.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:54 +0000] "GET /wxo.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:54 +0000] "GET /colour.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:55 +0000] "GET /files.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:55 +0000] "GET /install.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:55 +0000] "GET /wp-contentt.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:55 +0000] "GET /config.php7 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:55 +0000] "GET /config.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:56 +0000] "GET /theme.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:56 +0000] "GET /block-bindings.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:56 +0000] "GET /class_api.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:56 +0000] "GET /inputs.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:57 +0000] "GET /root.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:57 +0000] "GET /menu.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:57 +0000] "GET /plugin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:57 +0000] "GET /cloud.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:57 +0000] "GET /configs.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:58 +0000] "GET /wp-configs.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:58 +0000] "GET /update.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:58 +0000] "GET /2.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:58 +0000] "GET /input.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [04/Sep/2026:17:05:58 +0000] "GET /aaa.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 54.234.120.76 - - [04/Sep/2026:17:08:48 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 74.7.230.55 - - [04/Sep/2026:17:10:48 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.228.20 - - [04/Sep/2026:17:10:48 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.241.141 - - [04/Sep/2026:17:10:48 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.244.1 - - [04/Sep/2026:17:10:48 +0000] "GET /robots.txt HTTP/1.1" 401 53 "http://cpcalendars.clicfinancement.ca/robots.txt" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.230.24 - - [04/Sep/2026:17:10:48 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.230.28 - - [04/Sep/2026:17:10:48 +0000] "GET /robots.txt HTTP/1.1" 401 53 "http://cpcontacts.clicfinancement.ca/robots.txt" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.228.32 - - [04/Sep/2026:17:10:49 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.244.18 - - [04/Sep/2026:17:10:49 +0000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "http://autodiscover.clicfinancement.ca/robots.txt" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.244.1 - - [04/Sep/2026:17:10:51 +0000] "GET /robots.txt HTTP/1.1" 200 26 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.230.28 - - [04/Sep/2026:17:10:51 +0000] "GET /robots.txt HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.244.1 - - [04/Sep/2026:17:10:51 +0000] "GET /robots.txt HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.227.9 - - [04/Sep/2026:17:10:51 +0000] "GET /wp-admin/setup-config.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:10:51 +0000] "GET /wp-admin/class.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.242.36 - - [04/Sep/2026:17:10:51 +0000] "GET /wp-includes/css/buttons.css HTTP/1.1" 401 53 "http://cpcontacts.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.241.13 - - [04/Sep/2026:17:10:51 +0000] "GET /media/system/js/core.js HTTP/1.1" 401 53 "http://cpcalendars.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.244.18 - - [04/Sep/2026:17:10:51 +0000] "GET /robots.txt HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.243.193 - - [04/Sep/2026:17:10:54 +0000] "GET /buy.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.242.36 - - [04/Sep/2026:17:10:54 +0000] "GET /media/system/js/core.js HTTP/1.1" 401 53 "http://cpcontacts.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.241.13 - - [04/Sep/2026:17:10:54 +0000] "GET /wp-includes/css/buttons.css HTTP/1.1" 401 53 "http://cpcalendars.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:10:54 +0000] "GET /wp-admin/update.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:10:57 +0000] "GET /bolt.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:10:58 +0000] "GET /wp-admin/themes.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:00 +0000] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:03 +0000] "GET /ab.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:11:05 +0000] "GET /wp-admin/ HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:06 +0000] "GET /000.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:09 +0000] "GET /wp-admin/css/colors/lock.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:12 +0000] "GET /wp-admin/wp-config-backup.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:15 +0000] "GET /wp-admin/maint/src/xth/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:11:15 +0000] "GET /wp-admin/update-core.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:18 +0000] "GET /wp-admin/images/html-api/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:21 +0000] "GET /wp-blog-header.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:24 +0000] "GET /wp-content/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:27 +0000] "GET /wp-content.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:30 +0000] "GET /wp-admin/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:11:30 +0000] "GET /wp-login.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:33 +0000] "GET /2.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:36 +0000] "GET /wp-admin.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:39 +0000] "GET /admin.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:41 +0000] "GET /system_core.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:45 +0000] "GET /system_log.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:48 +0000] "GET /ioxi-o.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:11:50 +0000] "GET /wp-admin/theme-install.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:50 +0000] "GET /aboutc.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:53 +0000] "GET /private/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:11:57 +0000] "GET /session_init.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:00 +0000] "GET /upload/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:03 +0000] "GET /images/ HTTP/1.1" 200 12490 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:05 +0000] "GET /admin/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:08 +0000] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 401 12503 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:12:10 +0000] "GET /wp-admin/css/install.min.css HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:10 +0000] "GET /themes.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:13 +0000] "GET /chosen.php HTTP/1.1" 401 12513 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:15 +0000] "GET /inputs.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:18 +0000] "GET /simple.php HTTP/1.1" 401 12509 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:20 +0000] "GET /system.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:23 +0000] "GET /item.php HTTP/1.1" 401 12513 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:25 +0000] "GET /wa/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:27 +0000] "GET /class.api.php HTTP/1.1" 401 12500 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:30 +0000] "GET /.well-known/ HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:12:30 +0000] "GET /wp-admin/install.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:32 +0000] "GET /worksec.php HTTP/1.1" 401 12508 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:34 +0000] "GET /adminfuns.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:37 +0000] "GET /bless.php HTTP/1.1" 401 12503 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:39 +0000] "GET /click.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:42 +0000] "GET /goods.php HTTP/1.1" 401 12511 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:44 +0000] "GET /shell.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:46 +0000] "GET /options.php HTTP/1.1" 401 12513 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:49 +0000] "GET /a.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.227.9 - - [04/Sep/2026:17:12:50 +0000] "GET /wp-admin/about.php HTTP/1.1" 500 724 "http://www.monphenixcs.techbala.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:51 +0000] "GET /t.php HTTP/1.1" 401 12496 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:54 +0000] "GET /m.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:56 +0000] "GET /rip.php HTTP/1.1" 401 12509 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:12:59 +0000] "GET /num.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:01 +0000] "GET /new.php HTTP/1.1" 401 12501 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:03 +0000] "GET /mah.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:06 +0000] "GET /log.php HTTP/1.1" 401 12510 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:08 +0000] "GET /mini.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:10 +0000] "GET /ahax.php HTTP/1.1" 401 12510 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:13 +0000] "GET /abcd.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:15 +0000] "GET /file.php HTTP/1.1" 401 12501 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:18 +0000] "GET /edit.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:20 +0000] "GET /root.php HTTP/1.1" 401 12496 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:22 +0000] "GET /1.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:25 +0000] "GET /wp-config-sample.php HTTP/1.1" 401 12511 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:27 +0000] "GET /database.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:29 +0000] "GET /classwithtostring.php HTTP/1.1" 401 12500 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:32 +0000] "GET /files.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:34 +0000] "GET /radio.php HTTP/1.1" 401 12510 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:37 +0000] "GET /about.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:39 +0000] "GET /first.php HTTP/1.1" 401 12511 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:42 +0000] "GET /file-mancvgertdxz.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:44 +0000] "GET /install.php HTTP/1.1" 401 12504 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:46 +0000] "GET /app.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:49 +0000] "GET /we.php HTTP/1.1" 401 12512 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:51 +0000] "GET /fm.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:54 +0000] "GET /vx.php HTTP/1.1" 401 12501 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:56 +0000] "GET /as.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:13:58 +0000] "GET /user.php HTTP/1.1" 401 12500 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:14:01 +0000] "GET /wp-admin/widgets-form-blocks-interface.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:14:03 +0000] "GET /scanner3.php HTTP/1.1" 401 12511 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:14:06 +0000] "GET /aa.php HTTP/1.1" 404 3421 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.243.193 - - [04/Sep/2026:17:14:08 +0000] "GET /filemanager.php HTTP/1.1" 401 12509 "http://cpanel.clicfinancement.ca" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 20.198.7.31 - - [04/Sep/2026:17:19:05 +0000] "GET / HTTP/1.1" 200 12489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:05 +0000] "GET /autoload_classmap.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:06 +0000] "GET /post.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:06 +0000] "GET /1.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:06 +0000] "GET /flower.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:06 +0000] "GET /admin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:06 +0000] "GET /file.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:07 +0000] "GET /meta.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:07 +0000] "GET /index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:07 +0000] "GET /abcd.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:07 +0000] "GET /about.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:07 +0000] "GET /randkeyword.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:08 +0000] "GET /goods.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:08 +0000] "GET /hehe.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:08 +0000] "GET /user.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:08 +0000] "GET /wp-2019.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:08 +0000] "GET /chosen.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:09 +0000] "GET /functions.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:09 +0000] "GET /cron.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:09 +0000] "GET /edit.phpA HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:09 +0000] "GET /gecko-new.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:09 +0000] "GET /cookie.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:10 +0000] "GET /xleet.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:10 +0000] "GET /spip.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:10 +0000] "GET /22.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:10 +0000] "GET /room.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:10 +0000] "GET /disagreed.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:11 +0000] "GET /text.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:11 +0000] "GET /alfa-rex.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:11 +0000] "GET /alfa-rex.php7 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:11 +0000] "GET /feeds.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:11 +0000] "GET /radio.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:12 +0000] "GET /dropdown.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:12 +0000] "GET /defaults.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:12 +0000] "GET /system.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:12 +0000] "GET /xmlrpc.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:13 +0000] "GET /xmlrpc.php0 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:13 +0000] "GET /colors.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:13 +0000] "GET /updates.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:13 +0000] "GET /alfa-rex1.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:13 +0000] "GET /wp-index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:14 +0000] "GET /wp-admin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:14 +0000] "GET /alfa.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:14 +0000] "GET /alfanew.php7 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:14 +0000] "GET /locale.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:14 +0000] "GET /wxo.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:15 +0000] "GET /colour.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:15 +0000] "GET /files.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:15 +0000] "GET /install.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:15 +0000] "GET /wp-contentt.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:15 +0000] "GET /config.php7 HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:16 +0000] "GET /config.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:16 +0000] "GET /theme.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:16 +0000] "GET /block-bindings.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:16 +0000] "GET /class_api.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:16 +0000] "GET /inputs.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:17 +0000] "GET /root.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:17 +0000] "GET /menu.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:17 +0000] "GET /plugin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:17 +0000] "GET /cloud.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:17 +0000] "GET /configs.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:18 +0000] "GET /wp-configs.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:18 +0000] "GET /update.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:18 +0000] "GET /2.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:18 +0000] "GET /input.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:17:19:18 +0000] "GET /aaa.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.178.110.66 - - [04/Sep/2026:17:21:25 +0000] "GET /api/session/properties HTTP/1.1" 500 724 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" 216.73.216.203 - - [04/Sep/2026:17:35:41 +0000] "GET /robots.txt HTTP/1.1" 200 26 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 51.15.215.70 - - [04/Sep/2026:18:25:39 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:18:35:32 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:18:35:32 +0000] "GET /autoload_classmap.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:18:35:33 +0000] "GET /post.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:18:35:33 +0000] "GET /1.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:18:35:34 +0000] "GET /flower.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:18:35:35 +0000] "GET /admin.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:18:35:36 +0000] "GET /file.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:51 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:51 +0000] "GET /autoload_classmap.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:52 +0000] "GET /post.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:53 +0000] "GET /1.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:53 +0000] "GET /flower.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:54 +0000] "GET /admin.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:55 +0000] "GET /file.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:56 +0000] "GET /meta.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:57 +0000] "GET /index.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:57 +0000] "GET /abcd.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:58 +0000] "GET /about.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:46:59 +0000] "GET /randkeyword.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:00 +0000] "GET /goods.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:00 +0000] "GET /hehe.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:01 +0000] "GET /user.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:02 +0000] "GET /wp-2019.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:03 +0000] "GET /chosen.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:04 +0000] "GET /functions.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:04 +0000] "GET /cron.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:05 +0000] "GET /edit.phpA HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:06 +0000] "GET /gecko-new.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:07 +0000] "GET /cookie.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:07 +0000] "GET /xleet.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:08 +0000] "GET /spip.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:09 +0000] "GET /22.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:10 +0000] "GET /room.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:11 +0000] "GET /disagreed.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:11 +0000] "GET /text.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:12 +0000] "GET /alfa-rex.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:13 +0000] "GET /alfa-rex.php7 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:14 +0000] "GET /feeds.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:14 +0000] "GET /radio.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:15 +0000] "GET /dropdown.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:16 +0000] "GET /defaults.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:17 +0000] "GET /system.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:18 +0000] "GET /xmlrpc.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:18 +0000] "GET /xmlrpc.php0 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:19 +0000] "GET /colors.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:20 +0000] "GET /updates.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:21 +0000] "GET /alfa-rex1.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:21 +0000] "GET /wp-index.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:22 +0000] "GET /wp-admin.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:23 +0000] "GET /alfa.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:24 +0000] "GET /alfanew.php7 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:24 +0000] "GET /locale.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:25 +0000] "GET /wxo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:26 +0000] "GET /colour.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:27 +0000] "GET /files.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:28 +0000] "GET /install.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:29 +0000] "GET /config.php7 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:29 +0000] "GET /config.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:30 +0000] "GET /theme.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:31 +0000] "GET /block-bindings.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:32 +0000] "GET /class_api.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:32 +0000] "GET /inputs.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:33 +0000] "GET /root.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:34 +0000] "GET /menu.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:18:47:35 +0000] "GET /plugin.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.243.46.220 - - [04/Sep/2026:18:50:00 +0000] "GET /.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /backup.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /backup.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /backup.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /backup.tgz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:40 +0000] "GET /backup.rar HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /backup.7z HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /backups.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /www.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /www.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /wwwroot.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /wwwroot.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /htdocs.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /htdocs.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:41 +0000] "GET /public_html.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /public_html.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /web.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /website.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /site.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /html.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /app.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /old.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /bak.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /data.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:42 +0000] "GET /backup.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /db.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /database.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /dump.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /db_backup.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /dbdump.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /mysql.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /mysqldump.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /data.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /users.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:43 +0000] "GET /www.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /site.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /sql.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /1.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /localhost.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /backup.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /db.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /dump.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /database.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /db_backup.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:44 +0000] "GET /mysql.sql.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /database.sqlite HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /db.sqlite HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /backup.bak HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /db.bak HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /database.bak HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /data.bak HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /wp-content/uploads/dump.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /wp-content/uploads/backup.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:45 +0000] "GET /wp-content/uploads/database.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /wp-content/database.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /wp-content/mysql.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /backups/database.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /cpanel.clicfinancement.ca.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /cpanel.clicfinancement.ca.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /cpanel.clicfinancement.ca_db.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /cpanel.zip HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /cpanel.tar.gz HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /cpanel.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [04/Sep/2026:19:07:46 +0000] "GET /2026.zip HTTP/1.1" 404 5749 "-" "-" 216.73.216.203 - - [04/Sep/2026:19:33:43 +0000] "GET /robots.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.203 - - [04/Sep/2026:19:33:43 +0000] "GET /sitemap.xml HTTP/1.1" 404 3425 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 190.204.51.142 - - [04/Sep/2026:20:13:02 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0" 169.40.142.177 - - [04/Sep/2026:20:31:48 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 198.235.24.8 - - [04/Sep/2026:21:05:08 +0000] "GET / HTTP/1.1" 200 40080 "http://webmail.clicfinancement.ca/" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 20.151.10.161 - - [04/Sep/2026:21:31:02 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 401 36 "-" "-" 141.94.36.11 - - [04/Sep/2026:21:55:54 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 141.94.36.11 - - [04/Sep/2026:21:55:54 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 198.235.24.130 - - [04/Sep/2026:21:56:00 +0000] "GET / HTTP/1.1" 401 36 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 94.154.43.146 - - [04/Sep/2026:21:57:37 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 94.154.43.135 - - [04/Sep/2026:21:57:41 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 5.133.192.135 - - [04/Sep/2026:22:02:05 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 5.133.192.135 - - [04/Sep/2026:22:02:05 +0000] "GET /favicon.ico HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 54.87.57.12 - - [04/Sep/2026:22:02:41 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 54.87.57.12 - - [04/Sep/2026:22:02:43 +0000] "GET / HTTP/1.1" 200 482 "http://www.boardreader.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36" 192.104.34.34 - - [04/Sep/2026:22:22:00 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 195.178.110.67 - - [04/Sep/2026:22:29:34 +0000] "GET /.git/HEAD HTTP/1.1" 500 724 "-" "Mozilla/5.0" 20.198.81.88 - - [04/Sep/2026:22:29:40 +0000] "GET / HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [04/Sep/2026:22:31:31 +0000] "GET / HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.197.17.142 - - [04/Sep/2026:22:45:51 +0000] "POST / HTTP/1.1" 500 - "https://clicfinancement.ca/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:13 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:13 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:14 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:15 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:16 +0000] "GET /.git/config HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:17 +0000] "POST / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:18 +0000] "GET /.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:19 +0000] "GET /.env.local HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:20 +0000] "GET /.env.production HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:20 +0000] "GET /.env.staging HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:21 +0000] "GET /.env.development HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:22 +0000] "GET /.env.test HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:22 +0000] "GET /.env.remote HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:23 +0000] "GET /.env.bak HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:23 +0000] "GET /.env.backup HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:24 +0000] "GET /.env.save HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:24 +0000] "GET /.env.old HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:25 +0000] "GET /.env.sample HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:25 +0000] "GET /.env.example HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:26 +0000] "GET /.env.dev HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:27 +0000] "GET /.env.prod HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:28 +0000] "GET /.env.stage HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:28 +0000] "GET /.env.ci HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:29 +0000] "GET /.env.docker HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:29 +0000] "GET /.env.live HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:30 +0000] "GET /.env.preprod HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:30 +0000] "GET /.env.uat HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:31 +0000] "GET /.env.dist HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:31 +0000] "GET /.env.swp HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:32 +0000] "GET /.env~ HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:33 +0000] "GET /.env1 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:34 +0000] "GET /.env2 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:34 +0000] "GET /.env_copy HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:35 +0000] "GET /.env.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:35 +0000] "GET /.env.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:36 +0000] "GET /.env.yaml HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:36 +0000] "GET /.env.yml HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:37 +0000] "GET /app/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:37 +0000] "GET /apps/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:38 +0000] "GET /api/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:39 +0000] "GET /web/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:39 +0000] "GET /site/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:40 +0000] "GET /public/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:40 +0000] "GET /admin/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:41 +0000] "GET /backend/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:41 +0000] "GET /server/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:41 +0000] "GET /frontend/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:42 +0000] "GET /src/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:42 +0000] "GET /core/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:43 +0000] "GET /core/app/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:43 +0000] "GET /config/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:43 +0000] "GET /private/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:44 +0000] "GET /application/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:45 +0000] "GET /bootstrap/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:45 +0000] "GET /database/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:46 +0000] "GET /storage/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:46 +0000] "GET /var/www/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:47 +0000] "GET /var/www/html/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:47 +0000] "GET /current/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:48 +0000] "GET /release/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:48 +0000] "GET /releases/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:49 +0000] "GET /shared/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:49 +0000] "GET /deploy/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:50 +0000] "GET /build/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:50 +0000] "GET /dist/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:51 +0000] "GET /public_html/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:51 +0000] "GET /htdocs/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:52 +0000] "GET /www/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:53 +0000] "GET /html/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:53 +0000] "GET /live/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:54 +0000] "GET /prod/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:54 +0000] "GET /dev/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:54 +0000] "GET /staging/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:55 +0000] "GET /opt/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:56 +0000] "GET /laravel/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:56 +0000] "GET /symfony/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:57 +0000] "GET /wordpress/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:58 +0000] "GET /wp/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:58 +0000] "GET /cms/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:59 +0000] "GET /drupal/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:07:59 +0000] "GET /joomla/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:00 +0000] "GET /magento/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:01 +0000] "GET /shopify/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:01 +0000] "GET /prestashop/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:02 +0000] "GET /codeigniter/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:02 +0000] "GET /cakephp/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:02 +0000] "GET /zend/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:03 +0000] "GET /yii/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:03 +0000] "GET /laravel5/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:04 +0000] "GET /v1/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:04 +0000] "GET /v2/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:05 +0000] "GET /v3/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:06 +0000] "GET /api/v1/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:07 +0000] "GET /api/v2/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:07 +0000] "GET /rest/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:08 +0000] "GET /graphql/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:08 +0000] "GET /gateway/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:09 +0000] "GET /microservice/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:09 +0000] "GET /service/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:10 +0000] "GET /api/v3/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:11 +0000] "GET /api/dev/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:11 +0000] "GET /api/staging/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:12 +0000] "GET /vendor/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:13 +0000] "GET /lib/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:13 +0000] "GET /resources/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:14 +0000] "GET /assets/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:14 +0000] "GET /uploads/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:15 +0000] "GET /internal/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:16 +0000] "GET /tools/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:16 +0000] "GET /scripts/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:17 +0000] "GET /bin/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:17 +0000] "GET /sbin/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:18 +0000] "GET /local/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:18 +0000] "GET /portal/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:19 +0000] "GET /dashboard/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:20 +0000] "GET /panel/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:20 +0000] "GET /crm/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:20 +0000] "GET /erp/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:21 +0000] "GET /shop/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:22 +0000] "GET /store/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:22 +0000] "GET /saas/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:23 +0000] "GET /client/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:23 +0000] "GET /project/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:24 +0000] "GET /admin-panel/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:25 +0000] "GET /control-panel/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:26 +0000] "GET /user-panel/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:26 +0000] "GET /node/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:27 +0000] "GET /express/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:28 +0000] "GET /next/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:29 +0000] "GET /nuxt/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:29 +0000] "GET /nest/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:30 +0000] "GET /react/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:30 +0000] "GET /vue/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:31 +0000] "GET /angular/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:31 +0000] "GET /svelte/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:32 +0000] "GET /vite/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:33 +0000] "GET /backup/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:34 +0000] "GET /backups/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:34 +0000] "GET /old/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:35 +0000] "GET /tmp/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:36 +0000] "GET /temp/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:36 +0000] "GET /lab/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:37 +0000] "GET /cronlab/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:37 +0000] "GET /cron/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:38 +0000] "GET /en/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:39 +0000] "GET /administrator/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:40 +0000] "GET /psnlink/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:40 +0000] "GET /exapi/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:41 +0000] "GET /sitemaps/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:41 +0000] "GET /.env.backup1 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:42 +0000] "GET /.env.backup2 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:43 +0000] "GET /logs/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:43 +0000] "GET /cache/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:44 +0000] "GET /mailer/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:45 +0000] "GET /mail/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:45 +0000] "GET /email/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:46 +0000] "GET /smtp/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:47 +0000] "GET /mailing/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:48 +0000] "GET /notifications/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:49 +0000] "GET /notify/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:50 +0000] "GET /sender/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:51 +0000] "GET /campaign/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:52 +0000] "GET /newsletter/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:52 +0000] "GET /ses/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:53 +0000] "GET /sendgrid/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:54 +0000] "GET /sparkpost/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:55 +0000] "GET /postmark/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:56 +0000] "GET /mailgun/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:57 +0000] "GET /mandrill/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:58 +0000] "GET /mailjet/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:08:59 +0000] "GET /brevo/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:00 +0000] "GET /transactional/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:01 +0000] "GET /bulk/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:02 +0000] "GET /aws/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:03 +0000] "GET /azure/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:05 +0000] "GET /gcp/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:06 +0000] "GET /cloud/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:07 +0000] "GET /infrastructure/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:07 +0000] "GET /docker/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:08 +0000] "GET /k8s/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:09 +0000] "GET /kubernetes/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:10 +0000] "GET /terraform/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:10 +0000] "GET /ansible/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:11 +0000] "GET /.git/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:12 +0000] "GET /ci/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:12 +0000] "GET /cd/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:13 +0000] "GET /jenkins/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:14 +0000] "GET /gitlab/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:14 +0000] "GET /github/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:15 +0000] "GET /actions/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:15 +0000] "GET /circleci/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:16 +0000] "GET /travis/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:16 +0000] "GET /buildkite/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:17 +0000] "GET /mysql/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:18 +0000] "GET /postgres/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:18 +0000] "GET /mongodb/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:18 +0000] "GET /redis/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:19 +0000] "GET /elasticsearch/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:19 +0000] "GET /rabbitmq/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:20 +0000] "GET /kafka/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:21 +0000] "GET /queue/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:21 +0000] "GET /worker/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:22 +0000] "GET /job/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:22 +0000] "GET /test/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:23 +0000] "GET /qa/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:24 +0000] "GET /preview/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:24 +0000] "GET /beta/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:25 +0000] "GET /uat/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:26 +0000] "GET /stage/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:26 +0000] "GET /development/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:27 +0000] "GET /production/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:28 +0000] "GET /config/app/.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:28 +0000] "GET /phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:29 +0000] "GET /info.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:29 +0000] "GET /php.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:30 +0000] "GET /i.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:30 +0000] "GET /pi.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:30 +0000] "GET /pinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:31 +0000] "GET /test.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:31 +0000] "GET /phpinfo HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:32 +0000] "GET /p.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:32 +0000] "GET /debug.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:33 +0000] "GET /admin/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:33 +0000] "GET /test/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:34 +0000] "GET /dev/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:35 +0000] "GET /old/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:36 +0000] "GET /tmp/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:36 +0000] "GET /public/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:37 +0000] "GET /info HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:38 +0000] "GET /php-info.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:38 +0000] "GET /phpversion.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:39 +0000] "GET /_phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:39 +0000] "GET /old_phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:40 +0000] "GET /server-info.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:41 +0000] "GET /server-status.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:41 +0000] "GET /_profiler/phpinfo HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:42 +0000] "GET /_environment HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:42 +0000] "GET /webroot/index.php/_environment HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:43 +0000] "GET /mail/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:44 +0000] "GET /cpanel/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:44 +0000] "GET /hosting/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:45 +0000] "GET /webmail/phpinfo.php HTTP/1.1" 200 34902 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:46 +0000] "GET /smtp/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:46 +0000] "GET /phpinfo.php.bak HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:47 +0000] "GET /phpinfo.php.old HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:47 +0000] "GET /phpinfo.php~ HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:48 +0000] "GET /info.php.bak HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:49 +0000] "GET /phpinfo.php.save HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:49 +0000] "GET /staging/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:50 +0000] "GET /beta/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:50 +0000] "GET /uat/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:51 +0000] "GET /qa/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:52 +0000] "GET /preview/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:52 +0000] "GET /www/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:53 +0000] "GET /htdocs/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:53 +0000] "GET /public_html/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:53 +0000] "GET /site/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:54 +0000] "GET /docs/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:54 +0000] "GET /wp-admin/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:55 +0000] "GET /administrator/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:55 +0000] "GET /core/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:56 +0000] "GET /includes/phpinfo.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:56 +0000] "GET /service-account.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:56 +0000] "GET /sa.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:57 +0000] "GET /gcp-key.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:58 +0000] "GET /gcp-credentials.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:58 +0000] "GET /gcp-sa.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:59 +0000] "GET /credentials.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:09:59 +0000] "GET /google-credentials.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:00 +0000] "GET /google-key.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:00 +0000] "GET /.config/gcloud/application_default_credentials.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:01 +0000] "GET /application_default_credentials.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:01 +0000] "GET /key.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:02 +0000] "GET /keyfile.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:02 +0000] "GET /firebase-adminsdk.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:03 +0000] "GET /firebase-key.json HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.199.15.89 - - [04/Sep/2026:23:10:03 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 20.198.81.88 - - [04/Sep/2026:23:14:34 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 78.177.131.169 - - [04/Sep/2026:23:20:47 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36" 20.194.2.112 - - [04/Sep/2026:23:46:10 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 35.233.231.1 - - [05/Sep/2026:00:00:26 +0000] "GET / HTTP/1.1" 400 52 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:01:00:42 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:01:00:42 +0000] "GET /autoload_classmap.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:01:00:43 +0000] "GET /post.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:01:00:43 +0000] "GET /1.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:01:00:44 +0000] "GET /flower.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 216.73.216.203 - - [05/Sep/2026:01:26:02 +0000] "GET /robots.txt HTTP/1.1" 200 26 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 100.62.21.210 - - [05/Sep/2026:01:49:34 +0000] "POST / HTTP/1.1" 500 - "https://clicfinancement.ca/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 195.178.110.15 - - [05/Sep/2026:01:51:55 +0000] "GET /wp-config.php-backup HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 94.154.43.146 - - [05/Sep/2026:01:54:05 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 205.210.31.147 - - [05/Sep/2026:01:54:24 +0000] "GET / HTTP/1.1" 401 36 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 20.198.81.88 - - [05/Sep/2026:02:05:58 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:05:58 +0000] "GET /autoload_classmap.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:05:59 +0000] "GET /post.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:06:00 +0000] "GET /1.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:06:01 +0000] "GET /flower.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:06:02 +0000] "GET /admin.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:06:02 +0000] "GET /file.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:06:03 +0000] "GET /index.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:10:34 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:10:34 +0000] "GET /autoload_classmap.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:10:35 +0000] "GET /post.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:10:36 +0000] "GET /1.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:10:36 +0000] "GET /flower.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:10:37 +0000] "GET /admin.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:10:38 +0000] "GET /file.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:46 +0000] "GET / HTTP/1.1" 200 12490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:46 +0000] "GET /autoload_classmap.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:47 +0000] "GET /post.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:47 +0000] "GET /1.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:47 +0000] "GET /flower.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:47 +0000] "GET /admin.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:47 +0000] "GET /file.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:48 +0000] "GET /meta.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:48 +0000] "GET /index.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:48 +0000] "GET /abcd.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:48 +0000] "GET /about.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:48 +0000] "GET /randkeyword.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:49 +0000] "GET /goods.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:49 +0000] "GET /hehe.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:49 +0000] "GET /user.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:49 +0000] "GET /wp-2019.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:49 +0000] "GET /chosen.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:50 +0000] "GET /functions.phpA HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:50 +0000] "GET /cron.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:50 +0000] "GET /edit.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:50 +0000] "GET /gecko-new.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:50 +0000] "GET /cookie.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:51 +0000] "GET /xleet.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:51 +0000] "GET /spip.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:51 +0000] "GET /22.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:51 +0000] "GET /room.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:51 +0000] "GET /disagreed.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:52 +0000] "GET /text.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:52 +0000] "GET /alfa-rex.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:52 +0000] "GET /alfa-rex.php7 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:52 +0000] "GET /feeds.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:52 +0000] "GET /radio.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:53 +0000] "GET /dropdown.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:53 +0000] "GET /defaults.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:53 +0000] "GET /system.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:53 +0000] "GET /xmlrpc.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:53 +0000] "GET /xmlrpc.php0 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:54 +0000] "GET /colors.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:54 +0000] "GET /updates.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:54 +0000] "GET /alfa-rex1.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:54 +0000] "GET /wp-index.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:54 +0000] "GET /wp-admin.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:55 +0000] "GET /alfa.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:55 +0000] "GET /alfanew.php7 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:55 +0000] "GET /locale.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:55 +0000] "GET /wxo.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:56 +0000] "GET /colour.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:56 +0000] "GET /files.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:56 +0000] "GET /install.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:56 +0000] "GET /wp-contentt.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:56 +0000] "GET /config.php7 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:57 +0000] "GET /config.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:57 +0000] "GET /theme.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:57 +0000] "GET /block-bindings.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:57 +0000] "GET /class_api.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:57 +0000] "GET /inputs.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:58 +0000] "GET /root.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:58 +0000] "GET /menu.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:58 +0000] "GET /plugin.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:58 +0000] "GET /cloud.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:58 +0000] "GET /configs.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:59 +0000] "GET /wp-configs.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:59 +0000] "GET /update.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:59 +0000] "GET /2.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:59 +0000] "GET /input.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:02:15:59 +0000] "GET /aaa.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:19 +0000] "GET / HTTP/1.1" 200 12494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:21 +0000] "GET /autoload_classmap.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:21 +0000] "GET /post.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:21 +0000] "GET /1.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:21 +0000] "GET /flower.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:22 +0000] "GET /admin.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:22 +0000] "GET /file.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:22 +0000] "GET /meta.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:22 +0000] "GET /index.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:22 +0000] "GET /abcd.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:23 +0000] "GET /about.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:23 +0000] "GET /randkeyword.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:23 +0000] "GET /goods.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:23 +0000] "GET /hehe.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:24 +0000] "GET /user.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:24 +0000] "GET /wp-2019.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:24 +0000] "GET /chosen.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:24 +0000] "GET /functions.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:24 +0000] "GET /cron.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:25 +0000] "GET /edit.phpA HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:25 +0000] "GET /gecko-new.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:25 +0000] "GET /cookie.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:25 +0000] "GET /xleet.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:26 +0000] "GET /spip.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:26 +0000] "GET /22.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:26 +0000] "GET /room.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:26 +0000] "GET /disagreed.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:26 +0000] "GET /text.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:27 +0000] "GET /alfa-rex.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:27 +0000] "GET /alfa-rex.php7 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:27 +0000] "GET /feeds.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:27 +0000] "GET /radio.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:28 +0000] "GET /dropdown.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:28 +0000] "GET /defaults.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:28 +0000] "GET /system.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:28 +0000] "GET /xmlrpc.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:28 +0000] "GET /xmlrpc.php0 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:29 +0000] "GET /colors.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:29 +0000] "GET /updates.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:29 +0000] "GET /alfa-rex1.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:29 +0000] "GET /wp-index.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:30 +0000] "GET /wp-admin.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:30 +0000] "GET /alfa.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:30 +0000] "GET /alfanew.php7 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:30 +0000] "GET /locale.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:30 +0000] "GET /wxo.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:31 +0000] "GET /colour.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:31 +0000] "GET /files.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:31 +0000] "GET /install.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:31 +0000] "GET /wp-contentt.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:32 +0000] "GET /config.php7 HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:32 +0000] "GET /config.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:32 +0000] "GET /theme.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:32 +0000] "GET /block-bindings.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:32 +0000] "GET /class_api.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:33 +0000] "GET /inputs.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:33 +0000] "GET /root.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:33 +0000] "GET /menu.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:33 +0000] "GET /plugin.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:34 +0000] "GET /cloud.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:34 +0000] "GET /configs.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:34 +0000] "GET /wp-configs.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:34 +0000] "GET /update.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:34 +0000] "GET /2.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:35 +0000] "GET /input.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:19:35 +0000] "GET /aaa.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [05/Sep/2026:02:50:51 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.149.209 - - [05/Sep/2026:02:51:57 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /46dbr8i8qeclytcxawrCdefault.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /wp-links-opml.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /images2.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /f35.update.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /media.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /adminfuns.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /4PJcpMFsD8B.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /av.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /images.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /ops.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /BDKR28WP.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:37 +0000] "GET /k.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /dex.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /222.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /chosen.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /1.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /fling.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /radio.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /mac.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /simple.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /sallu.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /blacks.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /wp.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /wander.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /abcd.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /run.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /vpn.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /alfa.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /133.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /indo.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /wp-content/uploads/ HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /w.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /wp_blog_footer.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /robot.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /sss.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /gulu.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /replace.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:38 +0000] "GET /reviall.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /44.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /ded.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /BDKR28Wo.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /nxc.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /or.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /das.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /.well-known/nam.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /1d9e308d1fb8cd.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /cvx.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /vo8lvekd4hhiu6meydu56piCdefault.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /406.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /bypass2.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /t.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /r57.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /ffile.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /xex.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /user-new.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /flash-kiss.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /k2.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /ftde.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /wp-blog.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /CAE-2.5.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [05/Sep/2026:03:17:39 +0000] "GET /ass.php HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:27 +0000] "GET /backup.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:28 +0000] "GET /backup.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:28 +0000] "GET /backup.tar.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:28 +0000] "GET /backup.tgz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:28 +0000] "GET /backup.rar HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:28 +0000] "GET /backup.7z HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:28 +0000] "GET /backups.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:28 +0000] "GET /www.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:28 +0000] "GET /www.tar.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:28 +0000] "GET /wwwroot.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:29 +0000] "GET /wwwroot.tar.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:29 +0000] "GET /htdocs.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:29 +0000] "GET /htdocs.tar.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:29 +0000] "GET /public_html.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:29 +0000] "GET /public_html.tar.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:29 +0000] "GET /web.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:29 +0000] "GET /website.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:29 +0000] "GET /site.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:29 +0000] "GET /html.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:30 +0000] "GET /app.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:30 +0000] "GET /old.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:30 +0000] "GET /bak.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:30 +0000] "GET /data.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:30 +0000] "GET /backup.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:30 +0000] "GET /db.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:30 +0000] "GET /database.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:30 +0000] "GET /dump.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:30 +0000] "GET /db_backup.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:31 +0000] "GET /dbdump.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:31 +0000] "GET /mysql.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:31 +0000] "GET /mysqldump.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:31 +0000] "GET /data.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:31 +0000] "GET /users.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:31 +0000] "GET /www.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:31 +0000] "GET /site.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:31 +0000] "GET /sql.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:31 +0000] "GET /1.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:32 +0000] "GET /localhost.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:32 +0000] "GET /backup.sql.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:32 +0000] "GET /db.sql.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:32 +0000] "GET /dump.sql.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:32 +0000] "GET /database.sql.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:32 +0000] "GET /db_backup.sql.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:32 +0000] "GET /mysql.sql.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:32 +0000] "GET /database.sqlite HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:32 +0000] "GET /db.sqlite HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:33 +0000] "GET /backup.bak HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:33 +0000] "GET /db.bak HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:33 +0000] "GET /database.bak HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:33 +0000] "GET /data.bak HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:33 +0000] "GET /wp-content/uploads/dump.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:33 +0000] "GET /wp-content/uploads/backup.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:33 +0000] "GET /wp-content/uploads/database.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:33 +0000] "GET /wp-content/database.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:34 +0000] "GET /wp-content/mysql.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:34 +0000] "GET /backups/database.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:34 +0000] "GET /webdisk.clicfinancement.ca.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:34 +0000] "GET /webdisk.clicfinancement.ca.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:34 +0000] "GET /webdisk.clicfinancement.ca_db.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:34 +0000] "GET /webdisk.zip HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:34 +0000] "GET /webdisk.tar.gz HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:34 +0000] "GET /webdisk.sql HTTP/1.1" 401 36 "-" "-" 195.178.110.22 - - [05/Sep/2026:03:18:34 +0000] "GET /2026.zip HTTP/1.1" 401 36 "-" "-" 44.195.30.193 - - [05/Sep/2026:03:21:12 +0000] "POST / HTTP/1.1" 500 - "https://www.clicfinancementca.techbala.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 213.209.159.84 - - [05/Sep/2026:03:26:47 +0000] "GET /.git/config HTTP/1.1" 500 724 "-" "Mozilla/5.0 (compatible; GitFinder/1.0)" 216.73.216.203 - - [05/Sep/2026:03:40:28 +0000] "GET /robots.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.203 - - [05/Sep/2026:03:40:28 +0000] "GET /sitemap.xml HTTP/1.1" 404 3425 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 74.7.228.20 - - [05/Sep/2026:04:06:42 +0000] "GET /robots.txt HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 20.205.10.93 - - [05/Sep/2026:04:15:20 +0000] "GET / HTTP/1.1" 200 12493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:22 +0000] "GET /wp-includes/ID3/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:22 +0000] "GET /wp-includes/fonts/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:23 +0000] "GET /wp/wp-admin/includes/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:23 +0000] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:23 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:23 +0000] "GET /wp-admin/js/about.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:23 +0000] "GET /wp-admin/network/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:24 +0000] "GET /wp-includes/customize/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:24 +0000] "GET /WSO.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:24 +0000] "GET /wp-includes/css/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:24 +0000] "GET /templates/beez3/error.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:24 +0000] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:25 +0000] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:25 +0000] "GET /wp-includes/css/dist/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:25 +0000] "GET /wp-includes/images/crystal/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:25 +0000] "GET /wp-admin/css/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:25 +0000] "GET /wp-admin/wp-conflg.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:26 +0000] "GET /wp-includes/ID3/file.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:26 +0000] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:26 +0000] "GET /admin/uploads/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:26 +0000] "GET /wp-content/cong.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:26 +0000] "GET /wp-includes/ID3/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:27 +0000] "GET /wp-includes/images/media/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:27 +0000] "GET /wp-admin/admin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:27 +0000] "GET /wp-content/languages/chosen.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:27 +0000] "GET /wp-content/plugins/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:27 +0000] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:28 +0000] "GET /goods.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:28 +0000] "GET /plugins/ HTTP/1.1" 200 12489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:28 +0000] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:29 +0000] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:29 +0000] "GET /cgi-bin/wp-2019.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:29 +0000] "GET /wp-admin/setup-config.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:29 +0000] "GET /wp-content/file.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:29 +0000] "GET /edit.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:30 +0000] "GET /file5.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:30 +0000] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:30 +0000] "GET /wp-admin/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:30 +0000] "GET /wp-includes/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:30 +0000] "GET /aa.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:31 +0000] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:31 +0000] "GET /wp-includes/blocks/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:31 +0000] "GET /wp-content/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:31 +0000] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:31 +0000] "GET /.well-known/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:32 +0000] "GET /modules/file.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:32 +0000] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:32 +0000] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:32 +0000] "GET /autoload_classmap.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:32 +0000] "GET /public/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:33 +0000] "GET /wp-admin/network/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:33 +0000] "GET /wp-content/uploads/2022/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:33 +0000] "GET /wp-content/uploads/json.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:33 +0000] "GET /wp-includes/SimplePie/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:33 +0000] "GET /wp-includes/customize/chosen.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:34 +0000] "GET /wp-includes/shell20211028.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:34 +0000] "GET /index/function.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:34 +0000] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:34 +0000] "GET /wp-content/style-css.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:34 +0000] "GET /wp-includes/Requests/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:35 +0000] "GET /wp-includes/pomo/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:35 +0000] "GET /file.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:35 +0000] "GET /wp-admin/css/colors/light/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:35 +0000] "GET /wp-includes/certificates/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:35 +0000] "GET /wp-admin/css/colors/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:36 +0000] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:36 +0000] "GET /wp-content/alfa.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:36 +0000] "GET /inputs.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:36 +0000] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:36 +0000] "GET /wp-content/about.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:37 +0000] "GET /1.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:37 +0000] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:37 +0000] "GET /wp-admin/images/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:37 +0000] "GET /wp-includes/block-supports/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:37 +0000] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:38 +0000] "GET /wp-content/upgrade/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:38 +0000] "GET /wp-admin/images/cloud.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:38 +0000] "GET /wp-admin/user/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:38 +0000] "GET /wp-admin/user/chosen.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:38 +0000] "GET /wp-content/admin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:39 +0000] "GET /wp-includes/file.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:39 +0000] "GET /admin/admin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:39 +0000] "GET /wp-includes/assets/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:39 +0000] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:39 +0000] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:40 +0000] "GET /wp-content/themes/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:40 +0000] "GET /wp-includes/block-patterns/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:40 +0000] "GET /aspera/faspex/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:40 +0000] "GET /cgi-bin/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:40 +0000] "GET /flower.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:41 +0000] "GET /wp-admin/js/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:41 +0000] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:41 +0000] "GET /admin/function.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:41 +0000] "GET /wp-admin/network/chosen.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:41 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:42 +0000] "GET /wp-content/uploads/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:42 +0000] "GET /wp-includes/assets/admin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:42 +0000] "GET /wp-includes/images/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:42 +0000] "GET /.well-known/classwithtostring.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:43 +0000] "GET /anonse/lock360.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:43 +0000] "GET /cgi-bin/wp-login.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:43 +0000] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:43 +0000] "GET /wp-content/themes/about.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:43 +0000] "GET /wp-content/uploads/2021/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:44 +0000] "GET /wp-includes/html-api/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:44 +0000] "GET /assets/images/doc.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:44 +0000] "GET /ioxi-o.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:44 +0000] "GET /radio.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:44 +0000] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:45 +0000] "GET /wp-admin/includes/cloud.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:45 +0000] "GET /wp-admin/includes/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:45 +0000] "GET /wp-admin/js/widgets/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:45 +0000] "GET /wp-content/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:45 +0000] "GET /admin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:46 +0000] "GET /functions.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:46 +0000] "GET /modules/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:46 +0000] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:46 +0000] "GET /admin/upload/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.10.93 - - [05/Sep/2026:04:15:46 +0000] "GET /ccx/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:12 +0000] "GET / HTTP/1.1" 200 12492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:14 +0000] "GET /wp-includes/ID3/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:14 +0000] "GET /wp-includes/fonts/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:15 +0000] "GET /wp/wp-admin/includes/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:15 +0000] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:15 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:15 +0000] "GET /wp-admin/js/about.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:15 +0000] "GET /wp-admin/network/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:16 +0000] "GET /wp-includes/customize/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:16 +0000] "GET /WSO.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:16 +0000] "GET /wp-includes/css/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:16 +0000] "GET /templates/beez3/error.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:16 +0000] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:17 +0000] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:17 +0000] "GET /wp-includes/css/dist/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:17 +0000] "GET /wp-includes/images/crystal/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:17 +0000] "GET /wp-admin/css/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:17 +0000] "GET /wp-admin/wp-conflg.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:18 +0000] "GET /wp-includes/ID3/file.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:18 +0000] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:18 +0000] "GET /admin/uploads/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:18 +0000] "GET /wp-content/cong.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:18 +0000] "GET /wp-includes/ID3/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:19 +0000] "GET /wp-includes/images/media/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:19 +0000] "GET /wp-admin/admin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:19 +0000] "GET /wp-content/languages/chosen.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:19 +0000] "GET /wp-content/plugins/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:19 +0000] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:20 +0000] "GET /goods.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:20 +0000] "GET /plugins/ HTTP/1.1" 200 12491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:20 +0000] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:21 +0000] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:21 +0000] "GET /cgi-bin/wp-2019.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:21 +0000] "GET /wp-admin/setup-config.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:21 +0000] "GET /wp-content/file.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:21 +0000] "GET /edit.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:22 +0000] "GET /file5.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:22 +0000] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:22 +0000] "GET /wp-admin/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:22 +0000] "GET /wp-includes/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:22 +0000] "GET /aa.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:23 +0000] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:23 +0000] "GET /wp-includes/blocks/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:23 +0000] "GET /wp-content/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:23 +0000] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:23 +0000] "GET /.well-known/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:24 +0000] "GET /modules/file.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:24 +0000] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:24 +0000] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:24 +0000] "GET /autoload_classmap.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:24 +0000] "GET /public/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:25 +0000] "GET /wp-admin/network/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:25 +0000] "GET /wp-content/uploads/2022/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:25 +0000] "GET /wp-content/uploads/json.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:25 +0000] "GET /wp-includes/SimplePie/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:25 +0000] "GET /wp-includes/customize/chosen.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:26 +0000] "GET /wp-includes/shell20211028.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:26 +0000] "GET /index/function.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:26 +0000] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:26 +0000] "GET /wp-content/style-css.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:26 +0000] "GET /wp-includes/Requests/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:27 +0000] "GET /wp-includes/pomo/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:27 +0000] "GET /file.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:27 +0000] "GET /wp-admin/css/colors/light/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:27 +0000] "GET /wp-includes/certificates/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:27 +0000] "GET /wp-admin/css/colors/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:28 +0000] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:28 +0000] "GET /wp-content/alfa.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:28 +0000] "GET /inputs.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:28 +0000] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:28 +0000] "GET /wp-content/about.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:29 +0000] "GET /1.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:29 +0000] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:29 +0000] "GET /wp-admin/images/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:29 +0000] "GET /wp-includes/block-supports/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:29 +0000] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:30 +0000] "GET /wp-content/upgrade/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:30 +0000] "GET /wp-admin/images/cloud.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:30 +0000] "GET /wp-admin/user/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:30 +0000] "GET /wp-admin/user/chosen.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:30 +0000] "GET /wp-content/admin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:31 +0000] "GET /wp-includes/file.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:31 +0000] "GET /admin/admin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:31 +0000] "GET /wp-includes/assets/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:31 +0000] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:32 +0000] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:32 +0000] "GET /wp-content/themes/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:32 +0000] "GET /wp-includes/block-patterns/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:32 +0000] "GET /aspera/faspex/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:32 +0000] "GET /cgi-bin/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:33 +0000] "GET /flower.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:33 +0000] "GET /wp-admin/js/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:33 +0000] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:33 +0000] "GET /admin/function.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:33 +0000] "GET /wp-admin/network/chosen.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:34 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:34 +0000] "GET /wp-content/uploads/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:34 +0000] "GET /wp-includes/assets/admin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:34 +0000] "GET /wp-includes/images/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:34 +0000] "GET /.well-known/classwithtostring.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:35 +0000] "GET /anonse/lock360.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:35 +0000] "GET /cgi-bin/wp-login.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:35 +0000] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:35 +0000] "GET /wp-content/themes/about.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:35 +0000] "GET /wp-content/uploads/2021/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:36 +0000] "GET /wp-includes/html-api/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:36 +0000] "GET /assets/images/doc.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:36 +0000] "GET /ioxi-o.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:36 +0000] "GET /radio.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:36 +0000] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:37 +0000] "GET /wp-admin/includes/cloud.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:37 +0000] "GET /wp-admin/includes/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:37 +0000] "GET /wp-admin/js/widgets/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:37 +0000] "GET /wp-content/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:37 +0000] "GET /admin.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:38 +0000] "GET /functions.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:38 +0000] "GET /modules/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:38 +0000] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:38 +0000] "GET /admin/upload/ HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:04:31:38 +0000] "GET /ccx/index.php HTTP/1.1" 404 3425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 44.215.105.197 - - [05/Sep/2026:04:49:08 +0000] "POST / HTTP/1.1" 500 - "https://clicfinancement.ca/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 192.42.116.145 - - [05/Sep/2026:05:00:05 +0000] "GET / HTTP/1.1" 200 482 "https://clicfinancement.ca" "Mozilla/5.0 (Linux; Android 7.0; BTV-DL09) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Mobile Safari/537.36" 192.42.116.145 - - [05/Sep/2026:05:00:12 +0000] "GET /?C=N;O=D HTTP/1.1" 200 482 "https://clicfinancement.ca?C=N;O=D" "Mozilla/5.0 (Linux; Android 7.0; BTV-DL09) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Mobile Safari/537.36" 192.42.116.145 - - [05/Sep/2026:05:00:20 +0000] "GET /?C=M;O=A HTTP/1.1" 200 482 "https://clicfinancement.ca?C=M;O=A" "Mozilla/5.0 (Linux; Android 7.0; BTV-DL09) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Mobile Safari/537.36" 192.42.116.145 - - [05/Sep/2026:05:00:28 +0000] "GET /?C=S;O=A HTTP/1.1" 200 482 "https://clicfinancement.ca?C=S;O=A" "Mozilla/5.0 (Linux; Android 7.0; BTV-DL09) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Mobile Safari/537.36" 192.42.116.145 - - [05/Sep/2026:05:00:36 +0000] "GET /?C=D;O=A HTTP/1.1" 200 482 "https://clicfinancement.ca?C=D;O=A" "Mozilla/5.0 (Linux; Android 7.0; BTV-DL09) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Mobile Safari/537.36" 32.198.93.152 - - [05/Sep/2026:05:31:59 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 54.175.205.73 - - [05/Sep/2026:05:36:31 +0000] "POST / HTTP/1.1" 500 - "https://clicfinancement.ca/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:06:11:48 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:06:11:48 +0000] "GET /wp-includes/ID3/index.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:06:11:49 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:06:11:50 +0000] "GET /wp-includes/ID3/index.php HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.243.46.220 - - [05/Sep/2026:06:17:33 +0000] "GET /.env HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 138.197.17.142 - - [05/Sep/2026:06:26:42 +0000] "POST / HTTP/1.1" 500 - "https://www.clicfinancementca.techbala.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 195.178.110.31 - - [05/Sep/2026:07:07:22 +0000] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.178.110.31 - - [05/Sep/2026:07:07:24 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.31 - - [05/Sep/2026:07:07:24 +0000] "GET /?rest_route=/gravitysmtp/v1/tests/mock-data&page=gravitysmtp-settings HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 195.178.110.31 - - [05/Sep/2026:07:07:24 +0000] "GET /livewire/update HTTP/1.1" 500 724 "-" "Mozilla/5.0" 195.178.110.31 - - [05/Sep/2026:07:07:25 +0000] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-connections HTTP/1.1" 500 724 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 195.178.110.31 - - [05/Sep/2026:07:07:32 +0000] "GET /?rest_route=/gravitysmtp/v1/tests/mock-data&page=gravitysmtp-connections HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 195.178.110.31 - - [05/Sep/2026:07:07:32 +0000] "GET /index.php?rest_route=/gravitysmtp/v1/tests/mock-data&page=gravitysmtp-settings HTTP/1.1" 500 724 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 195.178.110.31 - - [05/Sep/2026:07:07:34 +0000] "GET /wp-json/gravitysmtp/v1/tests/mock-data HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Linux; Android 13; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" 205.210.31.40 - - [05/Sep/2026:07:09:21 +0000] "GET / HTTP/1.1" 401 36 "http://webdisk.clicfinancement.ca/" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 195.178.110.31 - - [05/Sep/2026:07:09:33 +0000] "POST /signin HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 195.178.110.31 - - [05/Sep/2026:07:14:31 +0000] "POST /wp/wp-json/Batch/v1 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.178.110.31 - - [05/Sep/2026:07:14:45 +0000] "POST /wp/blog/wp-json/batch/v1 HTTP/1.1" 500 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.178.110.31 - - [05/Sep/2026:07:15:01 +0000] "POST /wp/index.php?rest_route=/batch/v1 HTTP/1.1" 500 724 "https://www.clicfinancementca.techbala.com/wp/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.178.110.31 - - [05/Sep/2026:07:15:15 +0000] "POST /wp/index.php?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 500 724 "https://www.clicfinancementca.techbala.com/wp/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.178.110.31 - - [05/Sep/2026:07:15:21 +0000] "POST /wp/?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 500 724 "https://www.clicfinancementca.techbala.com/wp/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.178.110.31 - - [05/Sep/2026:07:15:31 +0000] "POST /wp/?rest_route=/batch%2Fv1 HTTP/1.1" 500 724 "https://www.clicfinancementca.techbala.com/wp/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.178.110.31 - - [05/Sep/2026:07:15:37 +0000] "POST /wp/?rest_route=/batch/v1 HTTP/1.1" 500 724 "https://www.clicfinancementca.techbala.com/wp/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.178.110.31 - - [05/Sep/2026:07:15:45 +0000] "POST /wp/wp-json/batch/v1 HTTP/1.1" 500 724 "https://www.clicfinancementca.techbala.com/wp/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.178.110.31 - - [05/Sep/2026:07:15:51 +0000] "POST /wp//wp-json/batch/v1 HTTP/1.1" 500 724 "https://www.clicfinancementca.techbala.com/wp/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.178.110.31 - - [05/Sep/2026:07:15:53 +0000] "POST /wp/wp-json/batch/v1/ HTTP/1.1" 500 724 "https://www.clicfinancementca.techbala.com/wp/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.178.110.31 - - [05/Sep/2026:07:16:01 +0000] "POST /wp/blog/wp-json/batch/v1 HTTP/1.1" 500 724 "https://www.clicfinancementca.techbala.com/wp/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.178.110.31 - - [05/Sep/2026:07:16:17 +0000] "POST /wp/index.php?rest_route=/batch/v1 HTTP/1.1" 500 724 "https://www.clicfinancementca.techbala.com/wp/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.178.110.31 - - [05/Sep/2026:07:16:22 +0000] "POST /wp/index.php?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 500 724 "https://www.clicfinancementca.techbala.com/wp/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 114.119.135.120 - - [05/Sep/2026:08:17:20 +0000] "GET /robots.txt HTTP/1.1" 500 724 "https://clicfinancement.ca/robots.txt" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 195.178.110.22 - - [05/Sep/2026:08:39:12 +0000] "GET /backup.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:13 +0000] "GET /backup.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:13 +0000] "GET /backup.tar.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:13 +0000] "GET /backup.tgz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:14 +0000] "GET /backup.rar HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:14 +0000] "GET /backup.7z HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:15 +0000] "GET /backups.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:15 +0000] "GET /www.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:15 +0000] "GET /www.tar.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:16 +0000] "GET /wwwroot.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:16 +0000] "GET /wwwroot.tar.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:17 +0000] "GET /htdocs.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:17 +0000] "GET /htdocs.tar.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:17 +0000] "GET /public_html.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:18 +0000] "GET /public_html.tar.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:18 +0000] "GET /web.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:19 +0000] "GET /website.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:19 +0000] "GET /site.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:19 +0000] "GET /html.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:20 +0000] "GET /app.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:20 +0000] "GET /old.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:21 +0000] "GET /bak.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:21 +0000] "GET /data.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:22 +0000] "GET /backup.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:22 +0000] "GET /db.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:22 +0000] "GET /database.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:23 +0000] "GET /dump.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:23 +0000] "GET /db_backup.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:24 +0000] "GET /dbdump.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:24 +0000] "GET /mysql.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:24 +0000] "GET /mysqldump.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:25 +0000] "GET /data.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:25 +0000] "GET /users.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:26 +0000] "GET /www.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:26 +0000] "GET /site.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:26 +0000] "GET /sql.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:27 +0000] "GET /1.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:27 +0000] "GET /localhost.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:28 +0000] "GET /backup.sql.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:28 +0000] "GET /db.sql.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:28 +0000] "GET /dump.sql.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:29 +0000] "GET /database.sql.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:29 +0000] "GET /db_backup.sql.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:30 +0000] "GET /mysql.sql.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:30 +0000] "GET /database.sqlite HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:30 +0000] "GET /db.sqlite HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:31 +0000] "GET /backup.bak HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:31 +0000] "GET /db.bak HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:32 +0000] "GET /database.bak HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:32 +0000] "GET /data.bak HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:32 +0000] "GET /wp-content/uploads/dump.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:33 +0000] "GET /wp-content/uploads/backup.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:33 +0000] "GET /wp-content/uploads/database.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:34 +0000] "GET /wp-content/database.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:34 +0000] "GET /wp-content/mysql.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:34 +0000] "GET /backups/database.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:35 +0000] "GET /autodiscover.clicfinancement.ca.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:35 +0000] "GET /autodiscover.clicfinancement.ca.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:35 +0000] "GET /autodiscover.clicfinancement.ca_db.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:36 +0000] "GET /autodiscover.zip HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:36 +0000] "GET /autodiscover.tar.gz HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:37 +0000] "GET /autodiscover.sql HTTP/1.1" 400 52 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:39:37 +0000] "GET /2026.zip HTTP/1.1" 400 52 "-" "-" 32.198.93.152 - - [05/Sep/2026:08:48:14 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 4.204.224.164 - - [05/Sep/2026:09:48:03 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:03 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:03 +0000] "GET /f35.update.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:03 +0000] "GET /adminfuns.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:03 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:03 +0000] "GET /4PJcpMFsD8B.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:03 +0000] "GET /av.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:03 +0000] "GET /dex.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:03 +0000] "GET /chosen.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:03 +0000] "GET /1.php?p= HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:03 +0000] "GET /radio.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:03 +0000] "GET /blacks.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:03 +0000] "GET /run.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:04 +0000] "GET /vpn.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:04 +0000] "GET /alfa.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:04 +0000] "GET /wp-content/uploads/ HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:04 +0000] "GET /w.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:04 +0000] "GET /wp_blog_footer.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:04 +0000] "GET /robot.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:04 +0000] "GET /sss.php?p= HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:04 +0000] "GET /or.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:04 +0000] "GET /b8.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:04 +0000] "GET /xex.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:04 +0000] "GET /CAE-2.5.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:04 +0000] "GET /ass.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:04 +0000] "GET /felnggg.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:04 +0000] "GET /felnggg.update.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:04 +0000] "GET /jybkxer.php HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:04 +0000] "GET /edit-tags.php?p= HTTP/1.1" 404 5750 "-" "-" 4.204.224.164 - - [05/Sep/2026:09:48:04 +0000] "GET /nauik.php HTTP/1.1" 404 5750 "-" "-" 54.175.205.73 - - [05/Sep/2026:09:59:55 +0000] "POST / HTTP/1.1" 500 - "https://www.clicfinancementca.techbala.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 44.215.105.197 - - [05/Sep/2026:10:04:23 +0000] "POST / HTTP/1.1" 500 - "https://www.clicfinancementca.techbala.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 20.198.7.31 - - [05/Sep/2026:10:52:20 +0000] "GET / HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.81.88 - - [05/Sep/2026:10:52:23 +0000] "GET / HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.218.86.3 - - [05/Sep/2026:11:04:38 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.92.180.143 - - [05/Sep/2026:11:11:27 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (iPad; U; CPU OS 4_3 like Mac OS X; en-us) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8F190 Safari/6533.18.5"
Save
cmd:
run