FM / fd

/proc/172809/task/172809/fd

Name	Size	Mode	Actions
0	-	0666	edit dl rm
1	-	0666	edit dl rm
2	0	0640	edit dl rm
3	5085138	0640	edit dl rm
4	27210	0640	edit dl rm
6	0	0640	edit dl rm
7	-	0777	edit dl rm
8	-	0777	edit dl rm
9	-	0777	edit dl rm
10	-	0777	edit dl rm
11	-	600	edit dl rm
12	-	600	edit dl rm
13	-	0777	edit dl rm
14	-	0777	edit dl rm
15	9979	0640	edit dl rm

Edit: /var/log/nginx/access.log (9979B)

103.237.157.89 - - [13/Sep/2026:00:01:14 +0000] "GET /boaform/admin/formLogin?username=user&psd=user HTTP/1.0" 301 178 "-" "-"
54.184.226.94 - - [13/Sep/2026:00:01:59 +0000] "GET /?rnd=1789257719091 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring"
4.43.184.113 - - [13/Sep/2026:00:03:50 +0000] "GET /style/omo/anu/my/mc/a/b/auth.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36"
4.43.184.113 - - [13/Sep/2026:00:05:40 +0000] "GET /temp/ing/one/kip/ssh/mc/a/b/auth.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36"
4.43.184.113 - - [13/Sep/2026:00:06:20 +0000] "GET /mont.htm HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36"
4.43.184.113 - - [13/Sep/2026:00:06:53 +0000] "GET /drop.htm HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36"
4.43.184.113 - - [13/Sep/2026:00:08:59 +0000] "GET /images/cgi/bin/mrk/bom/mc/a/b/auth.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36"
4.43.184.113 - - [13/Sep/2026:00:09:56 +0000] "GET /images/cgi/bin/mrk/six/mc/a/b/auth.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36"
185.191.171.12 - - [13/Sep/2026:00:14:30 +0000] "GET /robots.txt HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)"
185.191.171.8 - - [13/Sep/2026:00:14:32 +0000] "GET /English/index.html HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)"
45.43.65.196 - - [13/Sep/2026:00:24:32 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
45.43.65.196 - - [13/Sep/2026:00:24:33 +0000] "POST / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
99.217.32.31 - - [13/Sep/2026:00:39:14 +0000] "GET /product-list-normal-orders/ HTTP/1.0" 301 178 "http://nabawater.com.sa/product-list-normal-orders/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
85.11.167.104 - - [13/Sep/2026:00:41:21 +0000] "GET /manifest.webmanifest HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
85.11.167.104 - - [13/Sep/2026:00:41:22 +0000] "GET /manifest.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
134.199.218.69 - - [13/Sep/2026:00:45:20 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"
134.199.218.69 - - [13/Sep/2026:00:45:21 +0000] "GET /favicon.ico HTTP/1.1" 404 134 "http://webmail.nabawater.com.sa/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"
45.139.177.245 - - [13/Sep/2026:00:50:18 +0000] "GET /product-list-normal-orders/ HTTP/1.0" 301 178 "http://nabawater.com.sa/product-list-normal-orders/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
205.210.31.148 - - [13/Sep/2026:00:55:19 +0000] "GET / HTTP/1.1" 404 134 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
8.216.5.21 - - [13/Sep/2026:00:57:06 +0000] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03I\x06\xB2\xF9\xBC\x99i\xC0Y\xFB\xF8\xBAe-\x83Ud]\x0E\x8D\xB7b8\xB4g\xC6\xDD9dZ8f g\xC1\x81i\xB3\xF6\xF2\xCB\xB0\xA9\x19N\xD6\xBD\x95g|p\xFC\xE9<Z\xA1\x90T\xB7\xE9\xA58'O;\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 166 "-" "-"
8.216.5.21 - - [13/Sep/2026:00:57:06 +0000] "GET / HTTP/1.1" 404 134 "-" "curl/7.74.0"
47.251.90.48 - - [13/Sep/2026:00:57:28 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
47.77.227.227 - - [13/Sep/2026:00:57:29 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
47.77.216.189 - - [13/Sep/2026:00:57:29 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36"
123.160.223.75 - - [13/Sep/2026:00:57:32 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
47.251.90.48 - - [13/Sep/2026:00:57:34 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36"
47.77.216.189 - - [13/Sep/2026:00:57:44 +0000] "GET /favicon.ico HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
123.160.223.72 - - [13/Sep/2026:00:57:48 +0000] "GET /uploads/site-images/1714411428cy8tO.png HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
35.162.140.124 - - [13/Sep/2026:01:01:59 +0000] "GET /?rnd=1789261318489 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring"
43.166.226.57 - - [13/Sep/2026:01:42:11 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
208.109.74.61 - - [13/Sep/2026:01:43:06 +0000] "GET /.well-known/acme-challenge/3SFXYUZU5CWD2_HYXI80D9BMF0SNLFOQ HTTP/1.1" 301 178 "-" "Cpanel-HTTP-Client/1.0"
208.109.74.61 - - [13/Sep/2026:01:43:07 +0000] "GET /.well-known/acme-challenge/-6DDG6A3-A_PRVWQW4XA1PET92PR1SF7 HTTP/1.1" 301 178 "-" "Cpanel-HTTP-Client/1.0"
208.109.74.61 - - [13/Sep/2026:01:43:09 +0000] "GET /.well-known/acme-challenge/G3X0S53-G1B_GMMNTQVQB35HJD-KHV-_ HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0"
208.109.74.61 - - [13/Sep/2026:01:43:11 +0000] "GET /.well-known/acme-challenge/8NJ1LI3WZQY_-J5ANA7B2SMLT5YS389J HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0"
208.109.74.61 - - [13/Sep/2026:01:43:11 +0000] "GET /.well-known/acme-challenge/YVR69PJ1XU-HOUWA8EFIHMT7KZJ4XHZN HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0"
208.109.74.61 - - [13/Sep/2026:01:43:12 +0000] "GET /.well-known/acme-challenge/XE6H3PV_UA7_JA0643K5TBDL744L16ES HTTP/1.1" 404 162 "-" "Cpanel-HTTP-Client/1.0"
54.184.226.94 - - [13/Sep/2026:02:01:57 +0000] "GET /?rnd=1789264917018 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring"
195.178.110.22 - - [13/Sep/2026:02:15:12 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
223.123.125.38 - - [13/Sep/2026:02:17:13 +0000] "GET /boaform/admin/formLogin?username=ec8&psd=ec8 HTTP/1.0" 301 178 "-" "-"
43.155.157.239 - - [13/Sep/2026:02:23:30 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
82.25.213.213 - - [13/Sep/2026:02:33:58 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
82.25.213.213 - - [13/Sep/2026:02:33:59 +0000] "POST / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
43.156.228.27 - - [13/Sep/2026:02:34:53 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
68.183.3.20 - - [13/Sep/2026:02:40:49 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; ForestEngine/1.0; +https://forestengine.net/)"
68.183.3.20 - - [13/Sep/2026:02:40:49 +0000] "GET /favicon.ico HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; ForestEngine/1.0; +https://forestengine.net/)"
54.184.226.94 - - [13/Sep/2026:03:01:59 +0000] "GET /?rnd=1789268518991 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring"
205.210.31.142 - - [13/Sep/2026:03:10:03 +0000] "GET / HTTP/1.0" 301 178 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
104.239.73.14 - - [13/Sep/2026:03:44:13 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
104.239.73.14 - - [13/Sep/2026:03:44:15 +0000] "POST / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
223.123.43.62 - - [13/Sep/2026:03:46:32 +0000] "POST /HNAP1/ HTTP/1.0" 404 162 "-" "-"
35.162.140.124 - - [13/Sep/2026:04:02:01 +0000] "GET /?rnd=1789272120937 HTTP/1.1" 301 178 "-" "GoDaddy-UptimeMonitoring"
168.194.164.3 - - [13/Sep/2026:04:07:10 +0000] "GET /admin/config.php HTTP/1.0" 404 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
43.173.180.161 - - [13/Sep/2026:04:15:29 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3"
43.135.142.7 - - [13/Sep/2026:04:21:50 +0000] "GET / HTTP/1.1" 404 134 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"

cmd: