/proc/172812/fd/
/proc/172812/fd
NameSizeModeActions
0-0666editdlrm
1-0666editdlrm
200640editdlrm
3581100640editdlrm
4117106560640editdlrm
58573900640editdlrm
7-0777editdlrm
8-0777editdlrm
9-0777editdlrm
1000640editdlrm
11-0777editdlrm
13-0777editdlrm
16-0777editdlrm
17-600editdlrm
18-600editdlrm
Edit: /var/log/nginx/access.log (58110B)
4.43.184.113 - - [12/Sep/2026:00:04:21 +0000] "GET /drop.htm HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36" 4.43.184.113 - - [12/Sep/2026:00:04:22 +0000] "GET /temp/ing/one/kip/ssh/mc/a/b/auth.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36" 4.43.184.113 - - [12/Sep/2026:00:06:07 +0000] "GET /mont.htm HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36" 4.43.184.113 - - [12/Sep/2026:00:07:02 +0000] "GET /style/omo/anu/my/mc/a/b/auth.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36" 4.43.184.113 - - [12/Sep/2026:00:07:22 +0000] "GET /images/cgi/bin/mrk/bom/mc/a/b/auth.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36" 4.43.184.113 - - [12/Sep/2026:00:14:06 +0000] "GET /images/cgi/bin/mrk/six/mc/a/b/auth.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36" 43.133.66.51 - - [12/Sep/2026:00:20:46 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 198.235.24.48 - - [12/Sep/2026:00:34:39 +0000] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03{\xCA\x17\xD4\xBBR\xCB\xDD\x99\x90\x99\xFA:\xD7\xDB\xB2Y\x1Fc8Z\x95\x82\x1B\x05\xD1(\xAF\xBD\x02\x22\x1D \xAE\x16X^\xAC\x9A\x92\xA6\x09\xD0v\xFD\xAF)\x01\xEF\x02\xC9\xDF\x05K\x09\xA1c\xC0\x1A\xA8\xAF\xA6\x96\xB3H\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 166 "-" "-" 198.235.24.48 - - [12/Sep/2026:00:34:39 +0000] "\x16\x03\x01\x00\xCA\x01\x00\x00\xC6\x03\x03\xEC\x89 \xC2\xDB\xE8\x91Y@\x0E-7\x97$\xD9+\xDC\xD2\x10\x87\xCF\xFCs\x00$\x13\x02\x13\x03\x13\x01\x13\x04\xC0,\xC00\xC0+\xC0/\xCC\xA9\xCC\xA8\xC0$\xC0(\xC0#\xC0'\x00\x9F\x00\x9E\x00k\x00g\x01\x00\x01\x8F\xFF\x01\x00\x01\x00\x00\x00\x00\x13\x00\x11\x00\x00\x0Eapi.ivacbd.com\x00\x0B\x00\x04\x03\x00\x01\x02\x00" 400 166 "-" "-" 3.110.134.113 - - [12/Sep/2026:01:01:27 +0000] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03p\xD5a\x13\xF0\xA7j\xAA\x17\xA5\xE2\x8E\xC9\x0C\xFF[\xAF\x06\x8FD\x13Gr_\xA9\x11\xA5\xA0\x9A\xA7\x9Cn \x18\xE9\x9A\xB2\xB5h\xF0k\x02\x85\xB2B\x88\xED<\x08\xC0\xE5\x98\xF0\xD0\xAA\xF4\x8B\xC0\xDF4\xFE\xB9\xA3\x8A\x11\x00$\x13\x02\x13\x03\x13\x01\x13\x04\xC0,\xC00\xC0+\xC0/\xCC\xA9\xCC\xA8\xC0$\xC0(\xC0#\xC0'\x00\x9F\x00\x9E\x00k\x00g\x01\x00\x01\x8F\xFF\x01\x00\x01\x00\x00\x00\x00\x13\x00\x11\x00\x00\x0Eapi.ivacbd.com\x00\x0B\x00\x04\x03\x00\x01\x02\x00" 400 166 "-" "-" 51.68.236.70 - - [12/Sep/2026:01:04:27 +0000] "GET /robots.txt HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.236.70 - - [12/Sep/2026:01:04:28 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 45.74.3.196 - - [12/Sep/2026:01:16:13 +0000] "GET /product-list-normal-orders/ HTTP/1.0" 301 178 "http://nabawater.com.sa/product-list-normal-orders/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 45.156.248.107 - - [12/Sep/2026:01:18:07 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.156.248.107 - - [12/Sep/2026:01:18:11 +0000] "POST / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 204.48.31.114 - - [12/Sep/2026:01:22:39 +0000] "GET /English/images/mega-image.png HTTP/1.1" 301 178 "http://nabawater.com.sa/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 23.138.88.103 - - [12/Sep/2026:01:22:43 +0000] "GET http://nabawater.com.sa/English/images/mega-image.png HTTP/1.1" 301 178 "http://nabawater.com.sa/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 45.156.248.107 - - [12/Sep/2026:01:24:32 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.156.248.107 - - [12/Sep/2026:01:24:33 +0000] "POST / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 43.164.194.198 - - [12/Sep/2026:01:24:53 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 152.232.101.48 - - [12/Sep/2026:01:40:07 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 152.232.101.48 - - [12/Sep/2026:01:40:08 +0000] "POST / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 120.240.178.140 - - [12/Sep/2026:01:42:57 +0000] "GET /robots.txt HTTP/1.1" 301 178 "http://nabawater.com.sa/robots.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.6274.118 Safari/537.36" 208.109.74.61 - - [12/Sep/2026:01:43:09 +0000] "GET /.well-known/acme-challenge/7N8SB9QJN3QQNO7QQJRGZ8GBLAMQ1GZH HTTP/1.1" 301 178 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [12/Sep/2026:01:43:11 +0000] "GET /.well-known/acme-challenge/LQSVD6XX8W-EGBBSN64NRGZJ2K1SOM7O HTTP/1.1" 301 178 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [12/Sep/2026:01:43:13 +0000] "GET /.well-known/acme-challenge/XWT0VUE2G_42__JS1Q63BNN4A8-S8-X2 HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [12/Sep/2026:01:43:15 +0000] "GET /.well-known/acme-challenge/64-CR_G7WIRULVNQL3SSYZ5PY82W0X9Y HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [12/Sep/2026:01:43:15 +0000] "GET /.well-known/acme-challenge/U8HTBH1KUHIOZKJ8VR8M8KTTT-NO6UKN HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [12/Sep/2026:01:43:16 +0000] "GET /.well-known/acme-challenge/GE22LQR3UJSKUGT0B5KUTUPK8JFJOIDU HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 4.43.184.113 - - [12/Sep/2026:01:52:54 +0000] "GET /mont.htm HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36" 35.162.140.124 - - [12/Sep/2026:01:53:40 +0000] "GET /?rnd=1789178020230 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 130.211.61.255 - - [12/Sep/2026:02:11:39 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 43.156.232.154 - - [12/Sep/2026:02:20:28 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.218.86.25 - - [12/Sep/2026:02:21:33 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 66.249.75.172 - - [12/Sep/2026:02:24:53 +0000] "GET /robots.txt HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.75.172 - - [12/Sep/2026:02:24:54 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.8010.36 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 192.121.136.97 - - [12/Sep/2026:02:26:03 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123" 188.166.22.79 - - [12/Sep/2026:02:39:56 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; ForestEngine/1.0; +https://forestengine.net/)" 188.166.22.79 - - [12/Sep/2026:02:39:56 +0000] "GET /favicon.ico HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; ForestEngine/1.0; +https://forestengine.net/)" 172.110.223.252 - - [12/Sep/2026:02:51:52 +0000] "GET / HTTP/1.1" 404 162 "-" "libwww-perl/6.83" 173.252.95.60 - - [12/Sep/2026:02:52:59 +0000] "GET /robots.txt HTTP/1.1" 301 178 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 54.184.226.94 - - [12/Sep/2026:02:54:36 +0000] "GET /?rnd=1789181676320 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 16.5.0.236 - - [12/Sep/2026:03:06:12 +0000] "GET / HTTP/1.1" 404 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.156.129.90 - - [12/Sep/2026:03:06:24 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.129.91 - - [12/Sep/2026:03:06:38 +0000] "GET /favicon.ico HTTP/1.1" 301 178 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 128.241.232.243 - - [12/Sep/2026:03:07:11 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.1568.406 Safari/537.36" 208.109.74.61 - - [12/Sep/2026:03:08:22 +0000] "POST /wp-cron.php?doing_wp_cron=1789182502.1079800128936767578125 HTTP/1.1" 301 178 "-" "WordPress/6.5.8; https://nabawater.com.sa" 160.250.181.124 - - [12/Sep/2026:03:13:36 +0000] "GET / HTTP/1.1" 404 162 "-" "-" 45.156.248.107 - - [12/Sep/2026:03:14:02 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.156.248.107 - - [12/Sep/2026:03:14:08 +0000] "POST / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 154.39.242.49 - - [12/Sep/2026:03:21:31 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.2862.531 Safari/537.36" 162.14.109.170 - - [12/Sep/2026:03:32:34 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.116.87 - - [12/Sep/2026:03:34:29 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 198.235.24.138 - - [12/Sep/2026:03:45:51 +0000] "GET / HTTP/1.1" 404 134 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 161.35.120.200 - - [12/Sep/2026:03:53:16 +0000] "GET /English/images/products/small/4.jpg HTTP/1.1" 301 178 "http://nabawater.com.sa/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 176.28.206.201 - - [12/Sep/2026:03:53:19 +0000] "GET http://nabawater.com.sa/English/images/products/small/4.jpg HTTP/1.1" 301 178 "http://nabawater.com.sa/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.162.140.124 - - [12/Sep/2026:03:55:33 +0000] "GET /?rnd=1789185332966 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 93.158.115.235 - - [12/Sep/2026:04:00:55 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.89 Mobile/15E148 Safari/604" 16.5.0.236 - - [12/Sep/2026:04:09:08 +0000] "GET / HTTP/1.1" 404 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 102.129.223.92 - - [12/Sep/2026:04:14:58 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 43.173.179.84 - - [12/Sep/2026:04:30:27 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 208.109.74.61 - - [12/Sep/2026:04:42:56 +0000] "GET /.well-known/acme-challenge/RNS0U6YDYUU0ZXGNXQ9UQEIKC0D11GSR HTTP/1.1" 301 178 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [12/Sep/2026:04:42:58 +0000] "GET /.well-known/acme-challenge/UUNKO8FWIQ2P782D7M_RRFK1BN_2LB30 HTTP/1.1" 301 178 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [12/Sep/2026:04:43:00 +0000] "GET /.well-known/acme-challenge/7KU31R0NNIZ95E-ZAQ0MT9IH5_XQN6TV HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [12/Sep/2026:04:43:01 +0000] "GET /.well-known/acme-challenge/Y-1SGND-Q2GR6CW06X0R2AV678BES3PN HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [12/Sep/2026:04:43:02 +0000] "GET /.well-known/acme-challenge/B609X6S0HBB6GCXZNGOC8Q0A_HDS03R- HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [12/Sep/2026:04:43:03 +0000] "GET /.well-known/acme-challenge/_CIWLVGHX11I9ORLCQ64M8-PQIC1YPEJ HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 54.184.226.94 - - [12/Sep/2026:04:56:28 +0000] "GET /?rnd=1789188987930 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 47.77.176.139 - - [12/Sep/2026:05:03:40 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" 47.77.192.144 - - [12/Sep/2026:05:03:41 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" 47.77.207.9 - - [12/Sep/2026:05:03:41 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" 47.77.176.139 - - [12/Sep/2026:05:03:41 +0000] "GET /favicon.ico HTTP/1.1" 404 162 "-" "fasthttp" 47.77.192.144 - - [12/Sep/2026:05:03:41 +0000] "GET /favicon.ico HTTP/1.1" 301 178 "-" "fasthttp" 47.77.207.9 - - [12/Sep/2026:05:03:41 +0000] "GET /favicon.ico HTTP/1.1" 404 162 "-" "fasthttp" 205.169.39.238 - - [12/Sep/2026:05:04:15 +0000] "GET /dfresh/documents/file_doc.php?l=_JeHFUq_VJOXJoGYDw_OXK0K0QWHtoGYDw_Product-UserID HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 152.32.135.48 - - [12/Sep/2026:05:06:02 +0000] "\x16\x03\x01\x01\x19\x01\x00\x01\x15\x03\x036\x90M'\xB6\xEB\xDB\xBE\x94Q1\x974~:Q1\xA1$\x82U)(\xB7\x8F\xE7<\xA0\xF3\x9Cz# \xC2\xB12\xE0\xA0$Ym\xDC\x221\xD6O{r\x13\xBF}\x84sh\xA4\xC4\xE9Z\xA3\xF8\xDD\xB8\xD3\x05H\x004\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x09\x00\x9E\xCC\xA8\xCC\xAA\x003\x00=\x00\x16\xC0" 400 166 "-" "-" 152.32.135.48 - - [12/Sep/2026:05:06:04 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 152.32.135.48 - - [12/Sep/2026:05:06:34 +0000] "GET /uploads/site-images/1714411428cy8tO.png HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 152.32.135.48 - - [12/Sep/2026:05:06:53 +0000] "GET /robots.txt HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 152.32.135.48 - - [12/Sep/2026:05:07:11 +0000] "GET /sitemap.xml HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 152.32.135.48 - - [12/Sep/2026:05:07:40 +0000] "GET /config.json HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 152.32.226.102 - - [12/Sep/2026:05:08:35 +0000] "\x16\x03\x01\x01\x19\x01\x00\x01\x15\x03\x03r\x8Ca\xD9\xDF%p\xB0\x04v^z\xD3\xF1i|\x1Fr5\x90j\xFD\xD1(\xD6\xF3\xA8f\xF9\x09\x93\xE9 m\xB2A\x87\x01-\x85k\x98r\xAB\xB2\xB1\x17\xD5\x07\xB5SqyN\x1B\xC2wSz\xF84\xC5M\x1E\x12\x004\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x09\x00\x9E\xCC\xA8\xCC\xAA\x003\x00=\x00\x16\xC0" 400 166 "-" "-" 152.32.226.102 - - [12/Sep/2026:05:08:36 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 152.32.226.102 - - [12/Sep/2026:05:09:05 +0000] "GET /uploads/site-images/1714411428cy8tO.png HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 152.32.226.102 - - [12/Sep/2026:05:09:12 +0000] "GET /robots.txt HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 152.32.226.102 - - [12/Sep/2026:05:09:18 +0000] "GET /sitemap.xml HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 152.32.226.102 - - [12/Sep/2026:05:09:24 +0000] "GET /config.json HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 104.253.36.159 - - [12/Sep/2026:05:13:43 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 104.253.36.159 - - [12/Sep/2026:05:13:44 +0000] "POST / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 43.134.93.164 - - [12/Sep/2026:05:29:23 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 2.26.172.97 - - [12/Sep/2026:05:48:12 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 2.26.172.97 - - [12/Sep/2026:05:48:15 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 2.26.172.97 - - [12/Sep/2026:05:48:23 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.26.172.97 - - [12/Sep/2026:05:48:24 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.26.172.97 - - [12/Sep/2026:05:48:30 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0" 2.26.172.97 - - [12/Sep/2026:05:48:46 +0000] "GET /?s=/Index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=printenv HTTP/1.1" 404 134 "-" "Mozilla/5.0" 2.26.172.97 - - [12/Sep/2026:05:48:49 +0000] "GET /?s=/Index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=printenv HTTP/1.1" 404 134 "-" "Mozilla/5.0" 2.26.172.97 - - [12/Sep/2026:05:48:50 +0000] "GET /index.php/module/action/param1/$%7B@print%28env%29%7D HTTP/1.1" 404 134 "-" "Mozilla/5.0" 2.26.172.97 - - [12/Sep/2026:05:49:04 +0000] "GET /index.php/module/action/param1/$%7B@print%28env%29%7D HTTP/1.1" 404 134 "-" "Mozilla/5.0" 2.26.172.97 - - [12/Sep/2026:05:49:13 +0000] "POST /_ignition/health-check HTTP/1.1" 404 134 "-" "Mozilla/5.0" 2.26.172.97 - - [12/Sep/2026:05:49:21 +0000] "POST /_ignition/health-check HTTP/1.1" 404 134 "-" "Mozilla/5.0" 2.26.172.97 - - [12/Sep/2026:05:49:27 +0000] "POST /_ignition/execute-solution HTTP/1.1" 404 134 "-" "Mozilla/5.0" 2.26.172.97 - - [12/Sep/2026:05:49:33 +0000] "POST /_ignition/execute-solution HTTP/1.1" 404 134 "-" "Mozilla/5.0" 2.26.172.97 - - [12/Sep/2026:05:49:33 +0000] "\x16\x03\x01\x05\xA8\x01\x00\x05\xA4\x03\x03W\xD0k3\xBB'\xBA\x16\x0C\x18K}0\xF5\xB8\x1A\xAF\x9F\xF9\x95\x0E\xD4\xFE+\xBC\x08U\xD7\xC0\x88\xB1_ l\xB9\x04\x01\x1Cj\x94t\xC4\xEA\xE2U\xAB\xC7B\x12\x9E\xD7x\x92\x07>:\xAB\xE2\xB4\xC0\xFD\xCE\xF0\x89\xC2\x00\x1A\xCC\xA9\xCC\xA8\xC0+\xC0/\xC0,\xC00\xC0\x09\xC0\x13\xC0" 400 166 "-" "-" 2.26.172.97 - - [12/Sep/2026:05:49:35 +0000] "GET /__debug__/execute?cmd=printenv HTTP/1.1" 404 134 "-" "Mozilla/5.0" 2.26.172.97 - - [12/Sep/2026:05:49:39 +0000] "GET /__debug__/execute?cmd=printenv HTTP/1.1" 404 134 "-" "Mozilla/5.0" 2.26.172.97 - - [12/Sep/2026:05:49:41 +0000] "GET /script HTTP/1.1" 404 134 "-" "Mozilla/5.0" 2.26.172.97 - - [12/Sep/2026:05:49:42 +0000] "GET /script HTTP/1.1" 404 134 "-" "Mozilla/5.0" 2.26.172.97 - - [12/Sep/2026:05:49:50 +0000] "GET /actuator/env HTTP/1.1" 404 134 "-" "Mozilla/5.0" 2.26.172.97 - - [12/Sep/2026:05:49:55 +0000] "GET /actuator/env HTTP/1.1" 404 134 "-" "Mozilla/5.0" 2.26.172.97 - - [12/Sep/2026:05:49:57 +0000] "GET /env HTTP/1.1" 404 134 "-" "Mozilla/5.0" 2.26.172.97 - - [12/Sep/2026:05:50:01 +0000] "GET /env HTTP/1.1" 404 134 "-" "Mozilla/5.0" 2.26.172.97 - - [12/Sep/2026:05:50:09 +0000] "GET /v2/api-docs HTTP/1.1" 404 134 "-" "Mozilla/5.0" 2.26.172.97 - - [12/Sep/2026:05:50:11 +0000] "GET /v2/api-docs HTTP/1.1" 404 134 "-" "Mozilla/5.0" 2.26.172.97 - - [12/Sep/2026:05:50:15 +0000] "GET /api-docs HTTP/1.1" 404 134 "-" "Mozilla/5.0" 107.178.194.170 - - [12/Sep/2026:05:50:20 +0000] "HEAD / HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (Android 13; Mobile; rv:109.0) Gecko/112.0 Firefox/112.0 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 18.224.58.163 - - [12/Sep/2026:05:50:20 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.51" 34.96.46.39 - - [12/Sep/2026:05:50:20 +0000] "GET /favicon.ico HTTP/1.1" 301 178 "-" "python-requests/2.33.0" 2.26.172.97 - - [12/Sep/2026:05:50:21 +0000] "GET /api-docs HTTP/1.1" 404 134 "-" "Mozilla/5.0" 2.26.172.97 - - [12/Sep/2026:05:50:24 +0000] "GET /swagger.json HTTP/1.1" 404 134 "-" "Mozilla/5.0" 2.26.172.97 - - [12/Sep/2026:05:50:26 +0000] "GET /swagger.json HTTP/1.1" 404 134 "-" "Mozilla/5.0" 107.178.194.168 - - [12/Sep/2026:05:50:29 +0000] "HEAD / HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (Linux; Android 13; Pixel 4a (5G) Build/TQ2A.230505.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/112.0.5615.136 Mobile Safari/537.36 GoogleApp/14.16.27.29.arm64 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 2.26.172.97 - - [12/Sep/2026:05:50:32 +0000] "GET /swagger/v1/swagger.json HTTP/1.1" 404 134 "-" "Mozilla/5.0" 107.178.194.168 - - [12/Sep/2026:05:50:32 +0000] "HEAD /frontend/web/assets/310b352a/js/bootstrap-select.min.js?v=1775457366 HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (Linux; Android 13; Pixel 4a (5G) Build/TQ2A.230505.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/112.0.5615.136 Mobile Safari/537.36 GoogleApp/14.16.27.29.arm64 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 107.178.194.170 - - [12/Sep/2026:05:50:32 +0000] "HEAD /frontend/web/assets/310b352a/js/bootstrap-clockpicker.min.js?v=1775457365 HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 107.178.194.169 - - [12/Sep/2026:05:50:33 +0000] "HEAD /frontend/web/assets/310b352a/js/custom.js?v=1775457367 HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (Android 13; Mobile; rv:109.0) Gecko/112.0 Firefox/112.0 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 107.178.194.168 - - [12/Sep/2026:05:50:33 +0000] "HEAD /frontend/web/assets/310b352a/js/jquery.rateyo.min.js?v=1775457372 HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (Linux; Android 13; Pixel 4a (5G) Build/TQ2A.230505.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/112.0.5615.136 Mobile Safari/537.36 GoogleApp/14.16.27.29.arm64 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 107.178.194.169 - - [12/Sep/2026:05:50:33 +0000] "HEAD /frontend/web/assets/310b352a/js/snackbar.min.js?v=1775457376 HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (Android 13; Mobile; rv:109.0) Gecko/112.0 Firefox/112.0 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 107.178.194.168 - - [12/Sep/2026:05:50:33 +0000] "HEAD /frontend/web/assets/310b352a/js/intlTelInput.min.js?v=1775457370 HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 107.178.194.168 - - [12/Sep/2026:05:50:33 +0000] "HEAD /frontend/web/assets/3a935f50/authchoice.js?v=1562064141 HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 107.178.194.168 - - [12/Sep/2026:05:50:33 +0000] "HEAD /frontend/web/assets/3efb0241/js/core.js?v=1775457044 HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 107.178.194.169 - - [12/Sep/2026:05:50:33 +0000] "HEAD /frontend/web/assets/310b352a/js/iziToast.min.js?v=1775457370 HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 107.178.194.169 - - [12/Sep/2026:05:50:33 +0000] "HEAD /frontend/web/assets/9269f783/yii.js?v=1551337386 HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 107.178.194.168 - - [12/Sep/2026:05:50:33 +0000] "HEAD /frontend/web/assets/310b352a/js/popper.min.js?v=1775457375 HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (Android 13; Mobile; rv:109.0) Gecko/112.0 Firefox/112.0 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 107.178.194.169 - - [12/Sep/2026:05:50:33 +0000] "HEAD /frontend/web/assets/9269f783/yii.activeForm.js?v=1551337386 HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (Android 13; Mobile; rv:109.0) Gecko/112.0 Firefox/112.0 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 107.178.194.170 - - [12/Sep/2026:05:50:33 +0000] "HEAD /frontend/web/assets/310b352a/js/lozad.min.js?v=1775457373 HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 107.178.194.169 - - [12/Sep/2026:05:50:33 +0000] "HEAD /frontend/web/assets/310b352a/js/datepicker.min.js?v=1775457367 HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 107.178.194.169 - - [12/Sep/2026:05:50:33 +0000] "HEAD /frontend/web/assets/310b352a/js/html5shiv.min.js?v=1775457370 HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 107.178.194.170 - - [12/Sep/2026:05:50:33 +0000] "HEAD /frontend/web/assets/310b352a/js/owl.carousel.min.js?v=1775457374 HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 107.178.194.170 - - [12/Sep/2026:05:50:33 +0000] "HEAD /frontend/web/assets/9269f783/yii.validation.js?v=1551337386 HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (Linux; Android 13; Pixel 4a (5G) Build/TQ2A.230505.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/112.0.5615.136 Mobile Safari/537.36 GoogleApp/14.16.27.29.arm64 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 107.178.194.170 - - [12/Sep/2026:05:50:33 +0000] "HEAD /frontend/web/assets/584e7fc0/jquery.js?v=1516469217 HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 107.178.194.170 - - [12/Sep/2026:05:50:33 +0000] "HEAD /frontend/web/assets/3efb0241/js/runOnLoad.js?v=1775457045 HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (Android 13; Mobile; rv:109.0) Gecko/112.0 Firefox/112.0 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 107.178.194.169 - - [12/Sep/2026:05:50:33 +0000] "HEAD /frontend/web/assets/310b352a/js/jquery.magnific-popup.min.js?v=1775457371 HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 107.178.194.169 - - [12/Sep/2026:05:50:33 +0000] "HEAD /frontend/web/assets/310b352a/js/bootstrap.min.js?v=1775457367 HTTP/1.1" 301 0 "http://nabawater.com.sa" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 2.26.172.97 - - [12/Sep/2026:05:50:34 +0000] "GET /swagger/v1/swagger.json HTTP/1.1" 404 134 "-" "Mozilla/5.0" 66.249.75.74 - - [12/Sep/2026:05:51:01 +0000] "GET / HTTP/1.1" 301 178 "-" "GoogleOther" 54.70.53.60 - - [12/Sep/2026:05:52:01 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" 54.184.226.94 - - [12/Sep/2026:05:57:23 +0000] "GET /?rnd=1789192642673 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 114.119.138.214 - - [12/Sep/2026:06:01:43 +0000] "GET /images/products/large/2.jpg HTTP/1.1" 301 178 "http://www.nabawater.com.sa/images/products/large/2.jpg" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (HTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 16.5.0.236 - - [12/Sep/2026:06:03:27 +0000] "GET / HTTP/1.1" 404 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 205.210.31.155 - - [12/Sep/2026:06:12:45 +0000] "\x16\x03\x01\x00\xCA\x01\x00\x00\xC6\x03\x03\x22\xFD\xBD\xA3\xAB~\x12\x1D\x99[\xE3\x8C\x18t|@qm\x92!>\xDDpH\xBC\xE8\x19\x08\xAC\xEF\x04\xCF\x00\x00h\xCC\x14\xCC\x13\xC0/\xC0+\xC00\xC0,\xC0\x11\xC0\x07\xC0'\xC0#\xC0\x13\xC0\x09\xC0(\xC0$\xC0\x14\xC0" 400 166 "-" "-" 205.210.31.155 - - [12/Sep/2026:06:12:45 +0000] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x90\x19\xFA#>s\x8A\x19\xFEW\xE3\xAF\xEA\xF1\x10d\x994\xB0\x9D\xA6i\x9E.\x82A;\x0C\x91\x18\xAF\xD0 <\xF14\x8B\xB6\xE6\xF7\xEC<\xAC\x9A\xB1sA/\x15c\x89\xC3uX\x13=\xE2\xBF\xFC7\xF7W6\xC1\xE1\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 166 "-" "-" 168.107.80.234 - - [12/Sep/2026:06:17:12 +0000] "GET /wp-login.php HTTP/1.1" 301 178 "https://wordpress.org/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 153.117.15.213 - - [12/Sep/2026:06:19:21 +0000] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 134 "-" "Hello, World" 153.117.15.213 - - [12/Sep/2026:06:19:24 +0000] ";sh+/tmp/gpon80&ipv=0" 400 166 "-" "-" 43.157.67.70 - - [12/Sep/2026:06:20:43 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.218.86.25 - - [12/Sep/2026:06:27:07 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 16.5.0.236 - - [12/Sep/2026:06:40:00 +0000] "GET / HTTP/1.1" 404 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 158.173.240.74 - - [12/Sep/2026:06:56:47 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36" 35.162.140.124 - - [12/Sep/2026:06:58:17 +0000] "GET /?rnd=1789196297429 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 119.28.140.106 - - [12/Sep/2026:07:14:46 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 128.90.61.79 - - [12/Sep/2026:07:19:36 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 128.90.61.79 - - [12/Sep/2026:07:21:00 +0000] "GET /favicon.ico HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 46.167.244.241 - - [12/Sep/2026:07:23:06 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPod; U; CPU iPhone OS 4_0 like Mac OS X; ks-IN) AppleWebKit/532.44.6 (KHTML, like Gecko) Version/3.0.5 Mobile/8B119 Safari/6532.44.6" 94.154.43.60 - - [12/Sep/2026:07:27:19 +0000] "GET / HTTP/1.0" 404 162 "-" "odin-scanner/0.4" 94.154.43.60 - - [12/Sep/2026:07:27:19 +0000] "GET /favicon.ico HTTP/1.0" 404 162 "-" "odin-scanner/0.4" 109.95.159.68 - - [12/Sep/2026:07:31:39 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0" 82.167.40.116 - - [12/Sep/2026:07:42:25 +0000] "GET /store HTTP/1.1" 301 178 "https://t.co/w3Os5SiSRC" "Mozilla/5.0 (iPhone; CPU iPhone OS 26_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23G71 Twitter for iPhone/12.19.1" 208.109.74.61 - - [12/Sep/2026:07:42:58 +0000] "GET /.well-known/acme-challenge/Q5TR8ZVN_VR4CBK2LWMPB82JDDHYFJO1 HTTP/1.1" 301 178 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [12/Sep/2026:07:43:00 +0000] "GET /.well-known/acme-challenge/SSD5NV3LAG4IE3GGQWJXJM25Q82E7141 HTTP/1.1" 301 178 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [12/Sep/2026:07:43:02 +0000] "GET /.well-known/acme-challenge/90WPHERBI9ZBQOTAF0Z356RJJ0VBLPBV HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [12/Sep/2026:07:43:04 +0000] "GET /.well-known/acme-challenge/SGIVADC6L0M-QJW8068JJ0QK43L4X_39 HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [12/Sep/2026:07:43:04 +0000] "GET /.well-known/acme-challenge/WAK4NY0JSA344-SPGBUYYCQDQ-DT-556 HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [12/Sep/2026:07:43:05 +0000] "GET /.well-known/acme-challenge/QQYR_RLNTN6OJH146-UCP6UYRO1I08XQ HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 193.56.28.89 - - [12/Sep/2026:07:57:13 +0000] "GET http://www.nabawater.com.sa/ HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 198.105.100.173 - - [12/Sep/2026:07:58:31 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 198.105.100.173 - - [12/Sep/2026:07:58:31 +0000] "POST / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 54.184.226.94 - - [12/Sep/2026:07:59:11 +0000] "GET /?rnd=1789199951064 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 43.159.152.187 - - [12/Sep/2026:07:59:59 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 119.8.33.114 - - [12/Sep/2026:08:07:45 +0000] "GET /ip HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 101.44.160.102 - - [12/Sep/2026:08:07:45 +0000] "GET /ip HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 149.232.133.67 - - [12/Sep/2026:08:07:46 +0000] "GET /ip HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 209.42.27.117 - - [12/Sep/2026:08:22:26 +0000] "POST /xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" 209.42.27.117 - - [12/Sep/2026:08:22:26 +0000] "POST /xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 209.42.27.117 - - [12/Sep/2026:08:22:27 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 209.42.27.117 - - [12/Sep/2026:08:22:27 +0000] "POST /blog/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 209.42.27.117 - - [12/Sep/2026:08:22:27 +0000] "POST /wp/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 209.42.27.117 - - [12/Sep/2026:08:22:27 +0000] "POST /wordpress/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 209.42.27.117 - - [12/Sep/2026:08:22:27 +0000] "POST /site/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 209.42.27.117 - - [12/Sep/2026:08:22:27 +0000] "POST /news/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 209.42.27.117 - - [12/Sep/2026:08:22:28 +0000] "POST /web/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 209.42.27.117 - - [12/Sep/2026:08:22:28 +0000] "POST /main/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 209.42.27.117 - - [12/Sep/2026:08:22:28 +0000] "POST /cms/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 209.42.27.117 - - [12/Sep/2026:08:22:28 +0000] "POST /wp-site/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 209.42.27.117 - - [12/Sep/2026:08:22:28 +0000] "POST /wpsite/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 209.42.27.117 - - [12/Sep/2026:08:22:28 +0000] "POST /old/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 209.42.27.117 - - [12/Sep/2026:08:22:28 +0000] "POST /new/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 209.42.27.117 - - [12/Sep/2026:08:22:28 +0000] "GET /wp-admin/ HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 209.42.27.117 - - [12/Sep/2026:08:22:29 +0000] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" 85.254.51.192 - - [12/Sep/2026:08:57:18 +0000] "GET /robots.txt HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.5790.171 Safari/537.36" 85.254.51.192 - - [12/Sep/2026:08:57:25 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.5790.171 Safari/537.36" 102.129.223.92 - - [12/Sep/2026:08:58:57 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 54.184.226.94 - - [12/Sep/2026:09:00:05 +0000] "GET /?rnd=1789203605004 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 102.129.223.92 - - [12/Sep/2026:09:01:20 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 213.169.215.141 - - [12/Sep/2026:09:20:24 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 213.169.215.141 - - [12/Sep/2026:09:20:25 +0000] "POST / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 16.5.0.236 - - [12/Sep/2026:09:22:58 +0000] "GET / HTTP/1.1" 404 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 66.132.172.134 - - [12/Sep/2026:09:43:57 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 66.132.172.134 - - [12/Sep/2026:09:43:58 +0000] "PRI * HTTP/2.0" 400 166 "-" "-" 66.132.172.134 - - [12/Sep/2026:09:44:01 +0000] "\x16\x03\x01\x01\x0F\x01\x00\x01\x0B\x03\x03\xF3\xE0,e\xB6_>\xBE\xF1\x7Fe\xAA\x91\xE4\x1E\x08qx\xA4R\x5C\xCA_^z\x95(u\x9C\x80#\x02 )f\xD2\x97\x06\x02Bx\xAC+\x08,B\xDB\x0CD\x7F\xB9Gx\xD4\xC6\xE4\x8EgC\x85K\xED\x92L`\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 166 "-" "-" 43.161.234.148 - - [12/Sep/2026:09:51:41 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 62.164.177.222 - - [12/Sep/2026:09:56:00 +0000] "POST /xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 62.164.177.222 - - [12/Sep/2026:09:56:04 +0000] "POST /xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 62.164.177.222 - - [12/Sep/2026:09:56:06 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 62.164.177.222 - - [12/Sep/2026:09:56:14 +0000] "POST /blog/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 62.164.177.222 - - [12/Sep/2026:09:56:31 +0000] "POST /wordpress/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 62.164.177.222 - - [12/Sep/2026:09:56:32 +0000] "POST /site/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 62.164.177.222 - - [12/Sep/2026:09:56:32 +0000] "POST /news/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 62.164.177.222 - - [12/Sep/2026:09:56:33 +0000] "POST /web/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" 62.164.177.222 - - [12/Sep/2026:09:56:33 +0000] "POST /main/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 62.164.177.222 - - [12/Sep/2026:09:56:33 +0000] "POST /cms/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" 62.164.177.222 - - [12/Sep/2026:09:56:34 +0000] "POST /wp-site/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 62.164.177.222 - - [12/Sep/2026:09:56:35 +0000] "POST /wpsite/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 62.164.177.222 - - [12/Sep/2026:09:56:35 +0000] "POST /old/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 62.164.177.222 - - [12/Sep/2026:09:56:36 +0000] "POST /new/xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" 62.164.177.222 - - [12/Sep/2026:09:56:36 +0000] "GET /wp-admin/ HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 62.164.177.222 - - [12/Sep/2026:09:56:38 +0000] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 54.184.226.94 - - [12/Sep/2026:10:00:59 +0000] "GET /?rnd=1789207259005 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 129.28.84.30 - - [12/Sep/2026:10:07:07 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.132.172.139 - - [12/Sep/2026:10:07:12 +0000] "\x16\x03\x01\x01\x07\x01\x00\x01\x03\x03\x034;i[<\x14V\xB09\xC1\xA3h2" 400 166 "-" "-" 66.132.172.139 - - [12/Sep/2026:10:07:12 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 66.132.172.139 - - [12/Sep/2026:10:07:14 +0000] "PRI * HTTP/2.0" 400 166 "-" "-" 199.45.154.65 - - [12/Sep/2026:10:07:57 +0000] "\x16\x03\x01\x01\x0B\x01\x00\x01\x07\x03\x03FO\x0C\xA0\x7FF\xE89\xECE1\x1A+\x9D3TF\xA5\x19\xD3\x1D@.\xC0\xD5V\x14-|\xA0.V \x05|\x1F\x04\xF2\xC6$\x95\xF9T\xD3(\xF4yM\xEB\x19\xDA\x93\xCF\x07L\x87CD\x901m\xFBL\xA8,\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 166 "-" "-" 199.45.154.65 - - [12/Sep/2026:10:08:01 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 199.45.154.65 - - [12/Sep/2026:10:08:03 +0000] "PRI * HTTP/2.0" 400 166 "-" "-" 20.12.242.41 - - [12/Sep/2026:10:08:04 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 zgrab/0.x" 66.132.224.81 - - [12/Sep/2026:10:13:39 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 66.132.224.81 - - [12/Sep/2026:10:13:40 +0000] "PRI * HTTP/2.0" 400 166 "-" "-" 66.132.224.81 - - [12/Sep/2026:10:13:42 +0000] "\x16\x03\x01\x01\x0F\x01\x00\x01\x0B\x03\x03\xDA7M\x97\xDC\xC0\xD7\xB5\x173e(@~\x03Y\x9B\x10|\xB9:2n8\xBB\xFFt\xD6\xB2\xDF\xF1? \xDC\xFB\xE1m\xB3\xA4\x12\xE2\xF6\xFE\xE5\xA8\x88\x96\xDBh\x82\xC3\xE5\x18\xF9\x14\x82\xA3\xE9\xD2\x16\xC0\x83\x12_x\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 166 "-" "-" 205.169.39.56 - - [12/Sep/2026:10:26:51 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 85.11.167.5 - - [12/Sep/2026:10:29:53 +0000] "GET / HTTP/1.1" 301 178 "-" "python-requests/2.27.1" 43.173.176.90 - - [12/Sep/2026:10:34:02 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 16.5.0.236 - - [12/Sep/2026:10:36:28 +0000] "GET / HTTP/1.1" 404 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 208.109.74.61 - - [12/Sep/2026:10:43:07 +0000] "GET /.well-known/acme-challenge/ZGOJYGCWB9WOXH9TRY_YRX3ZT83KJX-I HTTP/1.1" 301 178 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [12/Sep/2026:10:43:09 +0000] "GET /.well-known/acme-challenge/FUDP-ISFHZYZDI19SWV78UTPZG3YEXLW HTTP/1.1" 301 178 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [12/Sep/2026:10:43:11 +0000] "GET /.well-known/acme-challenge/LELCW60ZR69I5M1CXKOI7YEI_WIO86UH HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [12/Sep/2026:10:43:12 +0000] "GET /.well-known/acme-challenge/34F1BN2F-P0MFOIWZJHHMTENMT_FO7QV HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [12/Sep/2026:10:43:13 +0000] "GET /.well-known/acme-challenge/YF1JO8OEAEWGO1AUO2WY10DW8LJX-82E HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 208.109.74.61 - - [12/Sep/2026:10:43:14 +0000] "GET /.well-known/acme-challenge/0SW8U7QR2LLP9Q821TP9G1YUJ80VP546 HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0" 20.24.86.237 - - [12/Sep/2026:10:43:19 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:19 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:19 +0000] "GET /f35.update.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:20 +0000] "GET //adminfuns.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:20 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:20 +0000] "GET /4PJcpMFsD8B.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:20 +0000] "GET //av.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:20 +0000] "GET /dex.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:21 +0000] "GET /chosen.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:21 +0000] "GET /1.php?p= HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:21 +0000] "GET /radio.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:21 +0000] "GET /blacks.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:21 +0000] "GET /run.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:22 +0000] "GET /vpn.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:22 +0000] "GET /alfa.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:22 +0000] "GET /wp-content/uploads/ HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:22 +0000] "GET /w.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:23 +0000] "GET /wp_blog_footer.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:23 +0000] "GET /robot.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:23 +0000] "GET /sss.php?p= HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:23 +0000] "GET /or.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:23 +0000] "GET /b8.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:24 +0000] "GET /xex.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:24 +0000] "GET //CAE-2.5.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:24 +0000] "GET /ass.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:24 +0000] "GET /felnggg.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:24 +0000] "GET /felnggg.update.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:25 +0000] "GET /jybkxer.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:25 +0000] "GET /edit-tags.php?p= HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:25 +0000] "GET /nauik.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:25 +0000] "GET /wander.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:25 +0000] "GET /wsd.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:26 +0000] "GET /media.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:26 +0000] "GET /images.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:26 +0000] "GET /ops.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:26 +0000] "GET /BDKR28WP.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:26 +0000] "GET /mac.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:27 +0000] "GET /wmore1.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:27 +0000] "GET /wp-ainefgskk.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:27 +0000] "GET /ab.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:27 +0000] "GET /dairg.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:27 +0000] "GET /z60.php?p= HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:28 +0000] "GET /imageskir.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:28 +0000] "GET /backup-helper.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:28 +0000] "GET /1xmomo.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:28 +0000] "GET /almafkew.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:28 +0000] "GET //database2.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:29 +0000] "GET /aa.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:29 +0000] "GET //pJPoKA.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:29 +0000] "GET /24.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:29 +0000] "GET /42b5827789index.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:29 +0000] "GET /mmq.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:30 +0000] "GET /fryvbbn.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:30 +0000] "GET /ff.update.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:30 +0000] "GET /lzlhihzi.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:30 +0000] "GET /bfdghfgv.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:30 +0000] "GET /Dss.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:30 +0000] "GET /uploaxa1.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:31 +0000] "GET /uploartg.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:31 +0000] "GET /bgbagbcw.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:31 +0000] "GET /tegubsiu.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:31 +0000] "GET /xxw.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:31 +0000] "GET /router.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:32 +0000] "GET /cibrkysaeng.php HTTP/1.1" 301 178 "-" "-" 20.24.86.237 - - [12/Sep/2026:10:43:32 +0000] "GET /wp-wpbak.php HTTP/1.1" 301 178 "-" "-" 136.114.255.192 - - [12/Sep/2026:10:44:28 +0000] "GET /robots.txt HTTP/1.1" 301 178 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36" 136.114.255.192 - - [12/Sep/2026:10:44:30 +0000] "GET /page/about-us HTTP/1.1" 301 178 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36" 185.218.86.25 - - [12/Sep/2026:10:48:45 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 101.32.52.164 - - [12/Sep/2026:10:58:12 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 35.162.140.124 - - [12/Sep/2026:11:01:47 +0000] "GET /?rnd=1789210906940 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring" 169.40.142.190 - - [12/Sep/2026:11:11:02 +0000] "GET /api/session/properties HTTP/1.1" 301 178 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)"