File Content: subidadoimperador.decastilhosports.com.br 192.241.165.127 - - [15/Jun/2026:12:30:23 +0000] "GET / HTTP/1.1" 200 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.241.165.127 - - [15/Jun/2026:12:30:23 +0000] "GET / HTTP/1.1" 200 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.241.165.127 - - [15/Jun/2026:12:30:23 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 49535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.241.165.127 - - [15/Jun/2026:12:30:25 +0000] "GET /?author=1 HTTP/1.1" 200 67445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.241.165.127 - - [15/Jun/2026:12:30:26 +0000] "GET /?author=2 HTTP/1.1" 200 375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.241.165.127 - - [15/Jun/2026:12:30:26 +0000] "GET /wp-json/wp/v2/users/ HTTP/1.1" 200 637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.241.165.127 - - [15/Jun/2026:12:30:27 +0000] "POST /xmlrpc.php HTTP/1.1" 404 49535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 146.190.110.231 - - [15/Jun/2026:12:35:34 +0000] "GET / HTTP/1.1" 200 59225 "https://www.subathon.gloubeer.fr//blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 146.190.110.231 - - [15/Jun/2026:12:35:35 +0000] "GET /xmlrpc.php?rsd HTTP/1.1" 404 49535 "https://www.subathon.gloubeer.fr//blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 146.190.110.231 - - [15/Jun/2026:12:35:38 +0000] "GET /blog/robots.txt HTTP/1.1" 404 49535 "https://www.subathon.gloubeer.fr//blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 146.190.110.231 - - [15/Jun/2026:12:35:40 +0000] "GET /blog//wp-json/wp/v2/users/ HTTP/1.1" 301 - "https://www.subathon.gloubeer.fr//blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 146.190.110.231 - - [15/Jun/2026:12:35:41 +0000] "GET /blog//?author=1 HTTP/1.1" 404 49535 "https://www.subathon.gloubeer.fr//blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 146.190.110.231 - - [15/Jun/2026:12:35:43 +0000] "GET /blog//wp-json/oembed/1.0/embed?url=www.subidadoimperador.decastilhosports.com.br/blog/ HTTP/1.1" 301 - "https://www.subathon.gloubeer.fr//blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 146.190.110.231 - - [15/Jun/2026:12:35:44 +0000] "POST /blog//xmlrpc.php HTTP/1.1" 404 49535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 146.190.110.231 - - [15/Jun/2026:12:35:46 +0000] "POST /blog//wp-login.php HTTP/1.1" 404 49535 "www.subidadoimperador.decastilhosports.com.br/blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.204.70.130 - - [15/Jun/2026:13:27:08 +0000] "GET / HTTP/1.1" 200 13394 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 35.204.70.130 - - [15/Jun/2026:14:05:36 +0000] "GET / HTTP/1.1" 200 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.204.70.130 - - [15/Jun/2026:14:05:36 +0000] "GET / HTTP/1.1" 200 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.204.70.130 - - [15/Jun/2026:14:05:36 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 49535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.204.70.130 - - [15/Jun/2026:14:05:39 +0000] "GET /?author=1 HTTP/1.1" 200 67445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.204.70.130 - - [15/Jun/2026:14:05:40 +0000] "GET /?author=2 HTTP/1.1" 200 375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.204.70.130 - - [15/Jun/2026:14:05:40 +0000] "GET /wp-json/wp/v2/users/ HTTP/1.1" 200 637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.204.70.130 - - [15/Jun/2026:14:05:42 +0000] "POST /xmlrpc.php HTTP/1.1" 404 49535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 191.232.199.0 - - [15/Jun/2026:17:23:20 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:23 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:25 +0000] "GET //wp-links-opml.php HTTP/1.1" 301 - "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:26 +0000] "GET /wp-links-opml.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:28 +0000] "GET /a4.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:29 +0000] "GET /public/vx.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:31 +0000] "GET /profile.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:33 +0000] "GET /ok.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:34 +0000] "GET /aa.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:36 +0000] "GET /wp-admin/css/bolt.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:38 +0000] "GET /w3llstore.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:39 +0000] "GET /class-t.api.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:41 +0000] "GET /222.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:43 +0000] "GET /wp-omao.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:44 +0000] "GET /wp-blog-header.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:46 +0000] "GET /cx.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:47 +0000] "GET /aboute.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:49 +0000] "GET /wp-good.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:51 +0000] "GET /wen.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:52 +0000] "GET /drykl.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:54 +0000] "GET /an.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:55 +0000] "GET /eetu.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:57 +0000] "GET /wp-png.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:23:59 +0000] "GET /leaf.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:00 +0000] "GET /plugin-editor.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:02 +0000] "GET /new4.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:04 +0000] "GET /wplogbak.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:05 +0000] "GET /cu.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:07 +0000] "GET /bgymj.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:09 +0000] "GET /mk.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:10 +0000] "GET /shell.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:12 +0000] "GET /press.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:13 +0000] "GET /hroxw.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:15 +0000] "GET /bnm.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:16 +0000] "GET /gcqoa.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:18 +0000] "GET /wp-the.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:19 +0000] "GET /wp5.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:21 +0000] "GET /xx.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:23 +0000] "GET /asd.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:24 +0000] "GET /900.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:26 +0000] "GET /ms.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:27 +0000] "GET /tymn.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:29 +0000] "GET /wp-block.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:31 +0000] "GET /ws57.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:32 +0000] "GET /666.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:34 +0000] "GET /obfuscate.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:35 +0000] "GET /mode.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:37 +0000] "GET /s.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:39 +0000] "GET /b.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:40 +0000] "GET /ws80.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:42 +0000] "GET /tool.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:48 +0000] "GET /ws66.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:49 +0000] "GET /wp-kikikoko.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:51 +0000] "GET /lib.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:53 +0000] "GET /w2025.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:54 +0000] "GET /wp-wlx.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:56 +0000] "GET /ms-edit.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:57 +0000] "GET /mh.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:24:59 +0000] "GET /gettest.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:01 +0000] "GET //autovirgi.php HTTP/1.1" 301 - "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:02 +0000] "GET /autovirgi.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:04 +0000] "GET /file3.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:05 +0000] "GET /p-blog.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:07 +0000] "GET /set.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:08 +0000] "GET /ws82.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:10 +0000] "GET //nurseling.php HTTP/1.1" 301 - "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:12 +0000] "GET /nurseling.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:13 +0000] "GET /yw5bi63u.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:15 +0000] "GET /1.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:16 +0000] "GET /dass.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:18 +0000] "GET /x123.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:19 +0000] "GET /bmi.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:21 +0000] "GET /byypas.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:22 +0000] "GET /harvestry.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:24 +0000] "GET /wp-admin/network/edit.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:26 +0000] "GET /grsiuk.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:28 +0000] "GET /ws88.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:29 +0000] "GET /tt.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:31 +0000] "GET //rip.php HTTP/1.1" 301 - "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:32 +0000] "GET /rip.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:34 +0000] "GET /sid3.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:36 +0000] "GET /wp-class-atom.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:37 +0000] "GET /plugin-install.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:39 +0000] "GET /ccs.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:40 +0000] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:42 +0000] "GET /adoms.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:44 +0000] "GET /Jcrop.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:45 +0000] "GET /jga.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:47 +0000] "GET /mini.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:49 +0000] "GET /amax.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:50 +0000] "GET /8573.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:52 +0000] "GET /000.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:54 +0000] "GET /gaza.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:55 +0000] "GET /aboutc.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:57 +0000] "GET /new.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:25:58 +0000] "GET /term.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:00 +0000] "GET /kj.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:02 +0000] "GET /Okxob.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:04 +0000] "GET /xxx.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:05 +0000] "GET /hplfuns.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:07 +0000] "GET /wp-content/radio.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:09 +0000] "GET /wp-access.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:10 +0000] "GET /file61.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:12 +0000] "GET /edit.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:13 +0000] "GET /a5.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:15 +0000] "GET /domains.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:16 +0000] "GET /fs.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:18 +0000] "GET /jk.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:19 +0000] "GET /file6.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:21 +0000] "GET /wp-class-api.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:22 +0000] "GET /66.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:24 +0000] "GET /wp-links-opml.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:26 +0000] "GET /gifclass.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:28 +0000] "GET /dx.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:29 +0000] "GET /wp-admin/network/users.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:31 +0000] "GET /wp-blogs.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:32 +0000] "GET /first.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:34 +0000] "GET /txets.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:36 +0000] "GET /abc.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:37 +0000] "GET /zoo.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:39 +0000] "GET /t.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:40 +0000] "GET /retu11.PhP7 HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:42 +0000] "GET /8.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:43 +0000] "GET /ws48.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:45 +0000] "GET /bolt.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:47 +0000] "GET /admlo.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:48 +0000] "GET /166.php HTTP/1.1" 404 49535 "-" "-" 191.232.199.0 - - [15/Jun/2026:17:26:50 +0000] "GET /alr.php HTTP/1.1" 404 49535 "-" "-" 34.172.93.158 - - [15/Jun/2026:18:46:39 +0000] "GET / HTTP/1.1" 200 13394 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.172.93.158 - - [15/Jun/2026:19:23:52 +0000] "GET / HTTP/1.1" 200 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.172.93.158 - - [15/Jun/2026:19:23:53 +0000] "GET / HTTP/1.1" 200 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.172.93.158 - - [15/Jun/2026:19:23:53 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 49535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.172.93.158 - - [15/Jun/2026:19:23:54 +0000] "GET /?author=1 HTTP/1.1" 200 67445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.172.93.158 - - [15/Jun/2026:19:23:54 +0000] "GET /?author=2 HTTP/1.1" 200 375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.172.93.158 - - [15/Jun/2026:19:23:55 +0000] "GET /wp-json/wp/v2/users/ HTTP/1.1" 200 637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.172.93.158 - - [15/Jun/2026:19:23:56 +0000] "POST /xmlrpc.php HTTP/1.1" 404 49535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 178.62.23.7 - - [15/Jun/2026:19:55:22 +0000] "GET / HTTP/1.1" 200 13394 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 20.63.33.52 - - [15/Jun/2026:21:00:35 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:00:37 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:00:39 +0000] "GET /cream1.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:00:40 +0000] "GET /spawns.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:00:41 +0000] "GET /vx.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:00:43 +0000] "GET /wp-good.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:00:44 +0000] "GET /dal.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:00:45 +0000] "GET /green1.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:00:47 +0000] "GET /xmff.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:00:48 +0000] "GET /wp-tivate.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:00:50 +0000] "GET /aaf.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:00:51 +0000] "GET /ethnogr.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:00:52 +0000] "GET /misgrimmerly.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:00:54 +0000] "GET /pedodont.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:00:55 +0000] "GET /wornnessesal.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:00:57 +0000] "GET /wp-temp.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:00:58 +0000] "GET /wp-sanita.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:00:59 +0000] "GET /wp-the.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:01:00 +0000] "GET /wp-aothait.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:01:02 +0000] "GET /mr.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:01:03 +0000] "GET /pass4.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:01:04 +0000] "GET /wplink.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:01:06 +0000] "GET /file6.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:01:07 +0000] "GET /wee.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:01:08 +0000] "GET /wplogbak.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:01:10 +0000] "GET /awp-careers.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:01:11 +0000] "GET /by.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:01:12 +0000] "GET /op.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:01:14 +0000] "GET /gk.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:01:15 +0000] "GET /ponxnwapemsce.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:01:17 +0000] "GET /bajah.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:01:18 +0000] "GET /hoeig.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:01:20 +0000] "GET /wp-lvminl.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:01:21 +0000] "GET /whs73au5.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:01:22 +0000] "GET /sdm.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:01:23 +0000] "GET /super.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:01:25 +0000] "GET /cxs.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:01:26 +0000] "GET /00.php HTTP/1.1" 404 49535 "-" "-" 20.63.33.52 - - [15/Jun/2026:21:01:27 +0000] "GET /wp-blink.php HTTP/1.1" 404 49535 "-" "-" 35.252.66.141 - - [15/Jun/2026:21:28:08 +0000] "HEAD / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 35.252.66.141 - - [15/Jun/2026:21:28:11 +0000] "HEAD /blog/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 35.252.66.141 - - [15/Jun/2026:21:28:13 +0000] "HEAD /backup/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 35.252.66.141 - - [15/Jun/2026:21:28:14 +0000] "HEAD /wp/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 35.252.66.141 - - [15/Jun/2026:21:28:15 +0000] "HEAD /new/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 35.252.66.141 - - [15/Jun/2026:21:28:16 +0000] "HEAD /wordpress/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 35.252.66.141 - - [15/Jun/2026:21:28:17 +0000] "HEAD /old/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 192.185.176.186 - - [15/Jun/2026:22:22:16 +0000] "GET /.well-known/acme-challenge/GNABXQJK1YW90C20WMC3LB48G69O1OIK HTTP/1.1" 404 - "-" "Cpanel-HTTP-Client/1.0" 192.185.176.186 - - [15/Jun/2026:22:22:18 +0000] "GET /.well-known/acme-challenge/Q6DGQNN3_TQ6BIJNTTZV3CD3BBH-7TV4 HTTP/1.1" 404 - "-" "Cpanel-HTTP-Client/1.0" 20.104.198.19 - - [15/Jun/2026:22:25:48 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:25:50 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:25:51 +0000] "GET /core/init.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:25:53 +0000] "GET /aa.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:25:54 +0000] "GET /xmrlpc.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:25:55 +0000] "GET /class.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:25:56 +0000] "GET /goods.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:25:58 +0000] "GET /info.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:25:59 +0000] "GET /as.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:00 +0000] "GET /bb.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:01 +0000] "GET /about.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:03 +0000] "GET /222.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:04 +0000] "GET /test1.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:05 +0000] "GET /wp-mail.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:07 +0000] "GET /wp.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:08 +0000] "GET /adminfuns.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:09 +0000] "GET /php8.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:10 +0000] "GET /ioxi-o.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:12 +0000] "GET /edit.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:13 +0000] "GET /sid3.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:14 +0000] "GET /166.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:15 +0000] "GET /test.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:16 +0000] "GET /phpinfo/info.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:18 +0000] "GET /wp-the.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:19 +0000] "GET /CDX2.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:20 +0000] "GET /profile.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:22 +0000] "GET /ws80.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:23 +0000] "GET /a4.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:24 +0000] "GET /buy.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:26 +0000] "GET /core.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:27 +0000] "GET /lock360.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:28 +0000] "GET /bc.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:30 +0000] "GET /av.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:31 +0000] "GET /xs.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:32 +0000] "GET /xxa.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:33 +0000] "GET /index0.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:35 +0000] "GET /wp-kz.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:36 +0000] "GET /19.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:37 +0000] "GET /11.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:38 +0000] "GET /w.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:40 +0000] "GET /ws78.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:41 +0000] "GET /xxx.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:42 +0000] "GET /a7.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:44 +0000] "GET /BDKR28WP.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:45 +0000] "GET /a1.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:46 +0000] "GET /d.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:47 +0000] "GET /xff.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:48 +0000] "GET /xltt.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:50 +0000] "GET /son.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:51 +0000] "GET /doc.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:53 +0000] "GET /zo.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:54 +0000] "GET /xper1.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:55 +0000] "GET /tiny.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:56 +0000] "GET /s1.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:57 +0000] "GET /de.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:26:59 +0000] "GET /1a.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:00 +0000] "GET /2.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:02 +0000] "GET /sky.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:03 +0000] "GET /man.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:04 +0000] "GET /ms-edit.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:06 +0000] "GET /7.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:07 +0000] "GET /pp.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:08 +0000] "GET /mar.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:09 +0000] "GET /acp.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:11 +0000] "GET /zdd.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:12 +0000] "GET /link.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:13 +0000] "GET /sallu.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:14 +0000] "GET /aboute.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:16 +0000] "GET /one.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:17 +0000] "GET /tx79.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:18 +0000] "GET /wp-class.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:19 +0000] "GET /8.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:21 +0000] "GET /options.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:22 +0000] "GET /f5.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:23 +0000] "GET /alpha.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:24 +0000] "GET /son1.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:26 +0000] "GET /ggb.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:27 +0000] "GET /ss.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:28 +0000] "GET /rh.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:30 +0000] "GET /99.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:31 +0000] "GET /layout.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:32 +0000] "GET /12.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:33 +0000] "GET /fs.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:35 +0000] "GET /aaa.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:36 +0000] "GET /Ov-Simple1.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:37 +0000] "GET /a5.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:39 +0000] "GET /hplfuns.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:40 +0000] "GET /bolt.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:41 +0000] "GET /inputs.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:42 +0000] "GET /file2.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:43 +0000] "GET /index/function.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:45 +0000] "GET /wk/index.php HTTP/1.1" 301 - "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:46 +0000] "GET /wk/ HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:47 +0000] "GET /alfa.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:48 +0000] "GET /wp-theme.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:50 +0000] "GET /wp-file.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:51 +0000] "GET /default.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:53 +0000] "GET /mah.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:54 +0000] "GET /plugins.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:55 +0000] "GET /sf.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:57 +0000] "GET /a.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:27:58 +0000] "GET /k.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:28:01 +0000] "GET /ini.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:28:02 +0000] "GET /ca4.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:28:03 +0000] "GET /wp-admin/includes/index.php HTTP/1.1" 301 - "-" "-" 20.104.198.19 - - [15/Jun/2026:22:28:04 +0000] "GET /wp-admin/includes/ HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:28:06 +0000] "GET /wp-info.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:28:07 +0000] "GET /init.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:28:08 +0000] "GET /100.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:28:09 +0000] "GET /fm.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:28:11 +0000] "GET /z.ph HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:28:12 +0000] "GET /xroot7.php HTTP/1.1" 404 49535 "-" "-" 20.104.198.19 - - [15/Jun/2026:22:28:13 +0000] "GET /mini.php HTTP/1.1" 404 49535 "-" "-" 161.118.239.144 - - [15/Jun/2026:22:28:33 +0000] "GET / HTTP/1.1" 200 13394 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 161.118.239.144 - - [15/Jun/2026:22:28:33 +0000] "GET /wp-content/uploads/ HTTP/1.1" 200 304 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 161.118.239.144 - - [15/Jun/2026:22:28:34 +0000] "GET /wp-content/plugins/ HTTP/1.1" 404 49535 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 161.118.239.144 - - [15/Jun/2026:22:28:36 +0000] "GET /wp-content/themes/ HTTP/1.1" 404 49535 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 161.118.239.144 - - [15/Jun/2026:22:28:37 +0000] "GET /wp-includes/ HTTP/1.1" 404 49535 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 161.118.239.144 - - [15/Jun/2026:22:28:39 +0000] "GET /wp-admin/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 142.248.80.209 - - [16/Jun/2026:00:06:22 +0000] "GET / HTTP/1.1" 200 293 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Mobile/15E148 Safari/604.1" 142.248.80.209 - - [16/Jun/2026:00:06:22 +0000] "GET /wp-content/debug.log HTTP/1.1" 404 49535 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:38 +0000] "GET / HTTP/1.1" 200 13394 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.env.local.backup HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.git/FETCH_HEAD HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.env.production.copy HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.env.local.orig HTTP/1.1" 500 251 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.env.swp HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.env.production.orig HTTP/1.1" 500 251 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.git/HEAD HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.env.production.save HTTP/1.1" 500 251 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Mobile/15E148 Safari/604.1" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.git/refs/heads/master HTTP/1.1" 500 251 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.env~ HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.env.local.copy HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.git/logs/HEAD HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.env.local.save HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.env.local~ HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.git/config HTTP/1.1" 500 251 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.env.local.bak HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.env.orig HTTP/1.1" 500 251 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.env.production~ HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.env.local.swp HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:07:13 +0000] "GET / HTTP/1.1" 200 13394 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.env.production.old HTTP/1.1" 500 251 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.env.production.backup HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Edg/146.0.0.0" 142.248.80.209 - - [16/Jun/2026:00:06:47 +0000] "GET /wp-config.php.bak HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:47 +0000] "GET /wp-config.php.old HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:47 +0000] "GET /wp-config.php.save HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.git/refs/heads/main HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /api/client_secret.json HTTP/1.1" 500 294 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /gcp-key.json HTTP/1.1" 500 294 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /app/credentials.json HTTP/1.1" 500 294 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /.gcp/credentials.json HTTP/1.1" 500 294 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /gcloud-service-key.json HTTP/1.1" 500 294 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /client_secret.json HTTP/1.1" 500 294 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /config.json HTTP/1.1" 500 294 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Edg/146.0.0.0" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /credentials.json HTTP/1.1" 500 294 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /appsettings.json HTTP/1.1" 500 294 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 142.248.80.209 - - [16/Jun/2026:00:06:26 +0000] "GET /key.json HTTP/1.1" 500 251 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /serviceAccount.json HTTP/1.1" 500 294 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /config/gcp.json HTTP/1.1" 500 295 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /gcp.json HTTP/1.1" 500 295 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /service-account-file.json HTTP/1.1" 500 295 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /.env.development HTTP/1.1" 500 295 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /service-account-key.json HTTP/1.1" 500 294 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /public/.env HTTP/1.1" 500 295 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /.cursor/mcp.json HTTP/1.1" 500 294 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Edg/146.0.0.0" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /secrets/gcp-key.json HTTP/1.1" 500 295 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /api/.env HTTP/1.1" 500 294 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /config/production.json HTTP/1.1" 500 295 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /config/service-account.json HTTP/1.1" 404 49535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /.openai/config.json HTTP/1.1" 404 49535 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /serviceAccountKey.json HTTP/1.1" 500 251 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0" 142.248.80.209 - - [16/Jun/2026:00:06:47 +0000] "GET /wp-config.php~ HTTP/1.1" 500 251 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /credentials/service-account.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /.kube/config HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.env.production.bak HTTP/1.1" 500 295 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.env.copy HTTP/1.1" 500 295 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0" 142.248.80.209 - - [16/Jun/2026:00:06:47 +0000] "GET /wp-config.php HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.env.production.swp HTTP/1.1" 500 295 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:46 +0000] "GET /.wp-config.php.swp HTTP/1.1" 500 251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /.env.bak HTTP/1.1" 500 304 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /firebase-credentials.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0" 142.248.80.209 - - [16/Jun/2026:00:06:59 +0000] "GET /.env.local.old HTTP/1.1" 500 295 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Edg/146.0.0.0" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /app/.env HTTP/1.1" 500 303 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /web/.env HTTP/1.1" 500 304 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /secrets/gcp-credentials.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /client_secrets.json HTTP/1.1" 500 303 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /firebase.json HTTP/1.1" 500 303 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /laravel/.env HTTP/1.1" 500 304 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Mobile/15E148 Safari/604.1" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /serviceAccountCredentials.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /.openclaw/openclaw.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /google_service_app.json HTTP/1.1" 500 303 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /src/.env HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /firebase-service-account.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /.env.test HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /config/default.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /config/firebase_credentials.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Edg/146.0.0.0" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /google-service-account.json HTTP/1.1" 500 303 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /appsettings.Production.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /.aws/credentials HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /gcp_key.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /.yarnrc HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /.env HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /service-account.json HTTP/1.1" 500 303 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" 142.248.80.209 - - [16/Jun/2026:00:06:26 +0000] "GET /google_credentials.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /.docker/config.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /google-application-credentials.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /auth/service_key.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Mobile/15E148 Safari/604.1" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /google-credentials.json HTTP/1.1" 500 303 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Edg/146.0.0.0" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /backend/.env HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /.npmrc HTTP/1.1" 500 304 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /google-services.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /.openclaw/agents/main/agent/models.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /keyfile.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /config/gcp-credentials.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /firebase_credentials.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /.config/gcloud/application_default_credentials.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /gcp-service-account.json HTTP/1.1" 500 303 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /secrets.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /.env.local HTTP/1.1" 500 304 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /firebase-adminsdk.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /secrets/service-account.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /appsettings.Development.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /service-account-credentials.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /application_default_credentials.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /server/.env HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /service_account.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /sa-private-key.json HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /.env.staging HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /.env.save HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /.env.production HTTP/1.1" 500 304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /.anthropic/config.json HTTP/1.1" 404 49535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /sa-key.json HTTP/1.1" 404 49535 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /service-account-config.json HTTP/1.1" 404 49535 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /.env.old HTTP/1.1" 404 49535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:24 +0000] "GET /gcp-credentials.json HTTP/1.1" 404 49535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:150.0) Gecko/20100101 Firefox/150.0" 142.248.80.209 - - [16/Jun/2026:00:06:27 +0000] "GET /google_key.json HTTP/1.1" 404 49535 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /google-cloud.json HTTP/1.1" 404 49535 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /.env.backup HTTP/1.1" 404 49535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" 142.248.80.209 - - [16/Jun/2026:00:06:25 +0000] "GET /config/credentials.json HTTP/1.1" 404 49535 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" 162.241.176.232 - - [16/Jun/2026:00:27:20 +0000] "GET /.well-known/acme-challenge/3BY-KDSB2-NGJUSXR_MONN3LW-TTQMD9 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.241.176.232 - - [16/Jun/2026:00:27:20 +0000] "GET /.well-known/acme-challenge/A-QAUXNL3WD0WP3BIV9YUCZX3U0QH6VZ HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 159.65.102.126 - - [16/Jun/2026:02:03:26 +0000] "GET /wp-login.php HTTP/1.1" 302 - "-" "Mozilla/5.0" 159.65.102.126 - - [16/Jun/2026:02:03:28 +0000] "GET /wp-login.php HTTP/1.1" 302 - "-" "Mozilla/5.0" 138.197.23.42 - - [16/Jun/2026:04:55:45 +0000] "GET / HTTP/1.1" 200 303 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 138.197.23.42 - - [16/Jun/2026:04:55:45 +0000] "GET /favicon.ico HTTP/1.1" 200 - "http://subidadoimperador.decastilhosports.com.br/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" Submit